General
- Target 2026-06-02_6795114a82f63bc2c64bf3ba0c4c29b8_coinminer_cryptolocker_elex
- Size 128KB
- Sample260602-eaam9sds5y
- SHA256 b07592df45a3649d1ec4b5ebf491e7a2b9af3d31d4a83272701e9f99474c8c52
- MD5 6795114a82f63bc2c64bf3ba0c4c29b8
- SHA1 0139528fe508a11c8412c1d702a1e03bf47c117e
- SHA512 7a32796f71441d624d8b7d3f4744d05805d234c1841cc8c92de7e2e1149efad3f74541b62ae909132ed6b2f9a0e557de9553d04a63e1ef87fea406398de11b49
- SSDEEP 1536:6Dv6QFElP6n+gBmFhkYkpfMOtEvwDpjX0:6Dv6a+l0YkGOtEvwDpjE
- TLSH T19ED37DB3BA884997DC831B70997FC613A10B7DAD0274078A764D3B07DF72146EA25D4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-02_6795114a82f63bc2c64bf3ba0c4c29b8_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_6795114a82f63bc2c64bf3ba0c4c29b8_coinminer_cryptolocker_elex
- Size 128KB
- SHA256 b07592df45a3649d1ec4b5ebf491e7a2b9af3d31d4a83272701e9f99474c8c52
- MD5 6795114a82f63bc2c64bf3ba0c4c29b8
- SHA1 0139528fe508a11c8412c1d702a1e03bf47c117e
- SHA512 7a32796f71441d624d8b7d3f4744d05805d234c1841cc8c92de7e2e1149efad3f74541b62ae909132ed6b2f9a0e557de9553d04a63e1ef87fea406398de11b49
- SSDEEP 1536:6Dv6QFElP6n+gBmFhkYkpfMOtEvwDpjX0:6Dv6a+l0YkGOtEvwDpjE
- TLSH T19ED37DB3BA884997DC831B70997FC613A10B7DAD0274078A764D3B07DF72146EA25D4B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detection of CryptoLocker Variants
- Custom signature
Detection of Cryptolocker Samples
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE