General
- Target 2026-05-10_6b4674b53a9b38c8365cec8b6c9dd457_coinminer_cryptolocker_elex
- Size 47KB
- Sample260510-kktrsab16w
- SHA256 96feaccdf9d8d17c5d7ca944bc2c0895f37c89b1b0d3e20cec915342323f1a66
- MD5 6b4674b53a9b38c8365cec8b6c9dd457
- SHA1 557d34af7efc878d6347ddf55f7177f257b26e95
- SHA512 edeaf06a8441c0091d2e0e15ecdbb15ea9dcc5d1dab7b577586c96d2bcef5117e251277c8d835b1daae172f38b222502ad5c500e61f690d6ae3f65d4ffdfe28a
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjGLZ:qUmnpomddpMOtEvwDpjjaYaFAeGLZ
- TLSH T1F72311386FD51AB2E377DAB6C5F695C2B926B8237C129D0D50CF17410C23B52ACA2D1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-10_6b4674b53a9b38c8365cec8b6c9dd457_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-10_6b4674b53a9b38c8365cec8b6c9dd457_coinminer_cryptolocker_elex
- Size 47KB
- SHA256 96feaccdf9d8d17c5d7ca944bc2c0895f37c89b1b0d3e20cec915342323f1a66
- MD5 6b4674b53a9b38c8365cec8b6c9dd457
- SHA1 557d34af7efc878d6347ddf55f7177f257b26e95
- SHA512 edeaf06a8441c0091d2e0e15ecdbb15ea9dcc5d1dab7b577586c96d2bcef5117e251277c8d835b1daae172f38b222502ad5c500e61f690d6ae3f65d4ffdfe28a
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjGLZ:qUmnpomddpMOtEvwDpjjaYaFAeGLZ
- TLSH T1F72311386FD51AB2E377DAB6C5F695C2B926B8237C129D0D50CF17410C23B52ACA2D1E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE