General
- Target 2026-05-11_4bcb01ce4b24bc1598fe5a97e57739da_coinminer_cryptolocker_elex
- Size 66KB
- Sample260511-e8kk5aex7m
- SHA256 090feca02337fd3b0303d834715eae58b3cf02c746c5fcd61c819c2d3900ad90
- MD5 4bcb01ce4b24bc1598fe5a97e57739da
- SHA1 f9f40f55b5a3d8585f13c2825f76ff3d3f5997f1
- SHA512 52347936be0e00cfc09614cb6f412dea4074e2076b3e01b84b43e976982814b7a498c7f28dbf6d0519e5c47bd1db17de6868a33aad7fdc8c1eb3e363311ee33f
- SSDEEP 768:qun/VbxjgQNQXtckstOOtEvwDpjfP6aLHTx:qu/Ju9cvMOtEvwDpj3/LHTx
- TLSH T175631A75ABD815B2E337A77599F6C6827427BC623D26990C20CE73054C33753A8A2E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-05-11_4bcb01ce4b24bc1598fe5a97e57739da_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-11_4bcb01ce4b24bc1598fe5a97e57739da_coinminer_cryptolocker_elex
- Size 66KB
- SHA256 090feca02337fd3b0303d834715eae58b3cf02c746c5fcd61c819c2d3900ad90
- MD5 4bcb01ce4b24bc1598fe5a97e57739da
- SHA1 f9f40f55b5a3d8585f13c2825f76ff3d3f5997f1
- SHA512 52347936be0e00cfc09614cb6f412dea4074e2076b3e01b84b43e976982814b7a498c7f28dbf6d0519e5c47bd1db17de6868a33aad7fdc8c1eb3e363311ee33f
- SSDEEP 768:qun/VbxjgQNQXtckstOOtEvwDpjfP6aLHTx:qu/Ju9cvMOtEvwDpj3/LHTx
- TLSH T175631A75ABD815B2E337A77599F6C6827427BC623D26990C20CE73054C33753A8A2E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detection of CryptoLocker Variants
- Custom signature
Detection of Cryptolocker Samples
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE