General
- Target 2026-05-05_2661f25a3b69c46d898921e5effa1d78_coinminer_cryptolocker_elex
- Size 66KB
- Sample260505-kdc6fsbv2v
- SHA256 d5849210b297c6189716f5f9de5e819d19957f58073a911aef90bc7e783f7a13
- MD5 2661f25a3b69c46d898921e5effa1d78
- SHA1 e699c9185de3c5503c892c35650e1eda91d5b2f9
- SHA512 430ce7fec77126a41423da7c9c0ad70ba1ef9c6983077279bfa2ac30f34f1752211e13c8632028ebbde19d5e9ac00edf96f32ecc786ee626323f005edc0cce3b
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwEbNl:qun/VbxjgQNQXtckstOOtEvwDpjfuQ
- TLSH T1FC630865ABD805B2E377A77599F7CA823527BC623D25590C20CA73058C33753A8A2E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-05_2661f25a3b69c46d898921e5effa1d78_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_2661f25a3b69c46d898921e5effa1d78_coinminer_cryptolocker_elex
- Size 66KB
- SHA256 d5849210b297c6189716f5f9de5e819d19957f58073a911aef90bc7e783f7a13
- MD5 2661f25a3b69c46d898921e5effa1d78
- SHA1 e699c9185de3c5503c892c35650e1eda91d5b2f9
- SHA512 430ce7fec77126a41423da7c9c0ad70ba1ef9c6983077279bfa2ac30f34f1752211e13c8632028ebbde19d5e9ac00edf96f32ecc786ee626323f005edc0cce3b
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwEbNl:qun/VbxjgQNQXtckstOOtEvwDpjfuQ
- TLSH T1FC630865ABD805B2E377A77599F7CA823527BC623D25590C20CA73058C33753A8A2E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detection of CryptoLocker Variants
- Custom signature
Detection of Cryptolocker Samples
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE