General
- Target 2026-05-04_18b368b7d946e6db1477df23811f253d_coinminer_cryptolocker_elex
- Size 67KB
- Sample260504-le461aa16j
- SHA256 b166f143a610def941437241e623e15b630f0766abbefa4d5469d45bb1c18f67
- MD5 18b368b7d946e6db1477df23811f253d
- SHA1 6e2e455f7309d647764031920cbf68797ce3bd1c
- SHA512 13a45d1d870a9b73c80c94bfd349abb60ad5a576f6168ba5c3a568e53a4c60ce806a4eb517402adb26036af6ba447de5682fab175f63c7fc40635df4f3d80fac
- SSDEEP 768:qun/VbxjgQNQXtckstOOtEvwDpjfP6aAc8:qu/Ju9cvMOtEvwDpj3/o
- TLSH T10D630975ABC815B2E377A675D9F786827427BC223D26990C10CA73454C33B53ACA2E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-04_18b368b7d946e6db1477df23811f253d_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_18b368b7d946e6db1477df23811f253d_coinminer_cryptolocker_elex
- Size 67KB
- SHA256 b166f143a610def941437241e623e15b630f0766abbefa4d5469d45bb1c18f67
- MD5 18b368b7d946e6db1477df23811f253d
- SHA1 6e2e455f7309d647764031920cbf68797ce3bd1c
- SHA512 13a45d1d870a9b73c80c94bfd349abb60ad5a576f6168ba5c3a568e53a4c60ce806a4eb517402adb26036af6ba447de5682fab175f63c7fc40635df4f3d80fac
- SSDEEP 768:qun/VbxjgQNQXtckstOOtEvwDpjfP6aAc8:qu/Ju9cvMOtEvwDpj3/o
- TLSH T10D630975ABC815B2E377A675D9F786827427BC223D26990C10CA73454C33B53ACA2E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE