General
- Target 2026-09-04_8da3749ca20cac81125db72fde5dc305_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 7.0MB
- Sample260905-efk17aszes
- SHA256 b4b7be172e505df6fb12f2211032653e36f02a053e625c67eda14b8954a2a469
- MD5 8da3749ca20cac81125db72fde5dc305
- SHA1 409b608ab33b51fe19d57df9c075a36e453fe4e8
- SHA512 47efd759808ff3a4f716ed263867f500561f461219790a16c92b13c79f5bcccffa539039ddfc5bb56793e353cdfa03b260ea864510df46e831c1b422e3c18304
- SSDEEP 196608:WpRFMTqBtz2zq2+0KqkOF6jtdsMsCOkO:IYTO0b7EdxO
- TLSH T19F762362B6D144F6D612973088A26B39FB71BB020F35CBD74361CE696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-04_8da3749ca20cac81125db72fde5dc305_coinminer_elex_emotet_hijackloader_icedid_remcos.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_8da3749ca20cac81125db72fde5dc305_coinminer_elex_emotet_hijackloader_icedid_remcos
- Size 7.0MB
- SHA256 b4b7be172e505df6fb12f2211032653e36f02a053e625c67eda14b8954a2a469
- MD5 8da3749ca20cac81125db72fde5dc305
- SHA1 409b608ab33b51fe19d57df9c075a36e453fe4e8
- SHA512 47efd759808ff3a4f716ed263867f500561f461219790a16c92b13c79f5bcccffa539039ddfc5bb56793e353cdfa03b260ea864510df46e831c1b422e3c18304
- SSDEEP 196608:WpRFMTqBtz2zq2+0KqkOF6jtdsMsCOkO:IYTO0b7EdxO
- TLSH T19F762362B6D144F6D612973088A26B39FB71BB020F35CBD74361CE696D33290EE37256
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects executables packed with VMProtect.
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Drops file in System32 directory