General
- Target 2026-04-19_843f02b756aa1c5de396748716045f78_coinminer_cryptolocker_elex
- Size 43KB
- Sample260419-ea4lcab16j
- SHA256 cf147601f4462bbb59483d1cae03138b3c20c6a73182f68eeb2014f6086af494
- MD5 843f02b756aa1c5de396748716045f78
- SHA1 fcfa3a68fd0f8c893220bbec06d9193a076136ee
- SHA512 92397a5b77d048062290f1e192ec7d44d1ce131947489a9a6729f042f2ba77a7ceb9c96ca1f7f7a4aa627f91a0fd4c0864c0701bebe7ae40e455cb4fc7deddb3
- SSDEEP 768:92nmdJjj671a59ylqXtOOtEvwDpjljtDxy+0684tl3RSxDQ0y5Aa:9/dVGJanicMOtEvwDpj5Pg94XB6cRAa
- TLSH T19C1372386FD91572E37BDA75C6F682C2B936B8223C12990C50CA67450C33F56ADA1F1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-04-19_843f02b756aa1c5de396748716045f78_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-19_843f02b756aa1c5de396748716045f78_coinminer_cryptolocker_elex
- Size 43KB
- SHA256 cf147601f4462bbb59483d1cae03138b3c20c6a73182f68eeb2014f6086af494
- MD5 843f02b756aa1c5de396748716045f78
- SHA1 fcfa3a68fd0f8c893220bbec06d9193a076136ee
- SHA512 92397a5b77d048062290f1e192ec7d44d1ce131947489a9a6729f042f2ba77a7ceb9c96ca1f7f7a4aa627f91a0fd4c0864c0701bebe7ae40e455cb4fc7deddb3
- SSDEEP 768:92nmdJjj671a59ylqXtOOtEvwDpjljtDxy+0684tl3RSxDQ0y5Aa:9/dVGJanicMOtEvwDpj5Pg94XB6cRAa
- TLSH T19C1372386FD91572E37BDA75C6F682C2B936B8223C12990C50CA67450C33F56ADA1F1E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE