General
- Target 2026-06-01_d18de382a0c0477e8aa0e7994f1b6044_coinminer_cryptolocker_elex
- Size 70KB
- Sample260601-prfkyscs3w
- SHA256 48c4a678aa701aa9ebf202c1548712b5251661aeef336f4f987ee4001d27f876
- MD5 d18de382a0c0477e8aa0e7994f1b6044
- SHA1 8e8e01a88747f4cad2ec8cd6ec7d1b1ba1b9c267
- SHA512 e67e01d20a18c628235ed60736806ff24a904cd533f262f3ed7384e1aad66e17a40012af7000df7fd8f3806709ddf5dd362e2b86b5760d3ac8c897a407efc7b8
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y87:76a+CdOOtEvwDpjQ9A
- TLSH T1AC6340396FD51A72E3B7CAB585F781C3B926B8233922990D50CE17414C33B56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-01_d18de382a0c0477e8aa0e7994f1b6044_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-01_d18de382a0c0477e8aa0e7994f1b6044_coinminer_cryptolocker_elex
- Size 70KB
- SHA256 48c4a678aa701aa9ebf202c1548712b5251661aeef336f4f987ee4001d27f876
- MD5 d18de382a0c0477e8aa0e7994f1b6044
- SHA1 8e8e01a88747f4cad2ec8cd6ec7d1b1ba1b9c267
- SHA512 e67e01d20a18c628235ed60736806ff24a904cd533f262f3ed7384e1aad66e17a40012af7000df7fd8f3806709ddf5dd362e2b86b5760d3ac8c897a407efc7b8
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y87:76a+CdOOtEvwDpjQ9A
- TLSH T1AC6340396FD51A72E3B7CAB585F781C3B926B8233922990D50CE17414C33B56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE