General
- Target 2026-08-17_68c2f84edd3ae0e64d3b50f928a1b737_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.2MB
- Sample260817-1zzvca1tev
- SHA256 fff366f793168a4b06e15abe4590005e97c73580824f27e9bc7dcec47a5bcd06
- MD5 68c2f84edd3ae0e64d3b50f928a1b737
- SHA1 a5c11c618f8b754980311c751500bbc50364fc21
- SHA512 1ff339c0bb96382ed46c84c8e9078cc25c656db14b2e7014891f6ee389076d95d85ba0c61ce1c87e679c2dedf95de6cd4418a96f2a388eb43d0b2771d4268a0b
- SSDEEP 196608:WpRFeTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsM:ISTO0b7EdxO7Ed
- TLSH T1B0862362B69140F6D612973088A26B39FB71BB420F31CBD74361CF696D33690EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-17_68c2f84edd3ae0e64d3b50f928a1b737_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_68c2f84edd3ae0e64d3b50f928a1b737_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 8.2MB
- SHA256 fff366f793168a4b06e15abe4590005e97c73580824f27e9bc7dcec47a5bcd06
- MD5 68c2f84edd3ae0e64d3b50f928a1b737
- SHA1 a5c11c618f8b754980311c751500bbc50364fc21
- SHA512 1ff339c0bb96382ed46c84c8e9078cc25c656db14b2e7014891f6ee389076d95d85ba0c61ce1c87e679c2dedf95de6cd4418a96f2a388eb43d0b2771d4268a0b
- SSDEEP 196608:WpRFeTqBtz2zq2+0KqkOF6jtdsMsCOkOF6jtdsM:ISTO0b7EdxO7Ed
- TLSH T1B0862362B69140F6D612973088A26B39FB71BB420F31CBD74361CF696D33690EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory