General
- Target 2026-10-28_51fa1d1da4c773b7eee18924a5885042_coinminer_elex_emotet_glassworm_hacktools_icedid_remcos
- Size 4.2MB
- Sample261030-e9re3ahs61
- SHA256 67854c502f12003e067d60ef121c1a40e67d448cb2483a1427c44ec2d62a3f0d
- MD5 51fa1d1da4c773b7eee18924a5885042
- SHA1 89f16fbfe8a2d0710041cf69fb000f958482cfd0
- SHA512 29fcaa45cea2dd984cf2bdefa78e8ce4734eb3a70d761b350d4682d11ca4b077077c3e64609c8f40a1ccbf064bde3fd0c60961e1750f4cd198f9e6480443805a
- SSDEEP 98304:3+I3L/wlG4UZej0jvy5SbWf+YFCbJBAUZLs2KH:3HPvyQaf+HbJVDKH
- TLSH T18816D103F2818472D41719700C77673A6A36FF116F258A93B794FE6D1D732E2973628A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-10-28_51fa1d1da4c773b7eee18924a5885042_coinminer_elex_emotet_glassworm_hacktools_icedid_remcos.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_51fa1d1da4c773b7eee18924a5885042_coinminer_elex_emotet_glassworm_hacktools_icedid_remcos.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_51fa1d1da4c773b7eee18924a5885042_coinminer_elex_emotet_glassworm_hacktools_icedid_remcos
- Size 4.2MB
- SHA256 67854c502f12003e067d60ef121c1a40e67d448cb2483a1427c44ec2d62a3f0d
- MD5 51fa1d1da4c773b7eee18924a5885042
- SHA1 89f16fbfe8a2d0710041cf69fb000f958482cfd0
- SHA512 29fcaa45cea2dd984cf2bdefa78e8ce4734eb3a70d761b350d4682d11ca4b077077c3e64609c8f40a1ccbf064bde3fd0c60961e1750f4cd198f9e6480443805a
- SSDEEP 98304:3+I3L/wlG4UZej0jvy5SbWf+YFCbJBAUZLs2KH:3HPvyQaf+HbJVDKH
- TLSH T18816D103F2818472D41719700C77673A6A36FF116F258A93B794FE6D1D732E2973628A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with VMProtect.
-
UPX dump on OEP (original entry point)
-
Suspicious use of NtSetInformationThreadHideFromDebugger