General
- Target 2026-06-04_51420c3698573c1ba5214eafabd72ea4_coinminer_cryptolocker_elex
- Size 48KB
- Sample260604-vyaaeabs9y
- SHA256 46acec3af5819ca5cdaca73c7f88a35d591148c12bae5a15fe81f96fa435b2f3
- MD5 51420c3698573c1ba5214eafabd72ea4
- SHA1 4f72c6819a051c595a93f0eb421f7e1ddf95e2e0
- SHA512 8b7213abfad0798a4df1a5da870028043c058578471d5cb980e50849caa18468910c0a3fee04d7b455f252c025f4b24365702066740b83f944715f1926c9e8e7
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfo8:qUmnpomddpMOtEvwDpjjaYaFAeG/Y88
- TLSH T1CF2310386FD51A72E377DAB6C5F695C2B926B8237C129D0C50CB17410C23F52ADA2E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-06-04_51420c3698573c1ba5214eafabd72ea4_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_51420c3698573c1ba5214eafabd72ea4_coinminer_cryptolocker_elex
- Size 48KB
- SHA256 46acec3af5819ca5cdaca73c7f88a35d591148c12bae5a15fe81f96fa435b2f3
- MD5 51420c3698573c1ba5214eafabd72ea4
- SHA1 4f72c6819a051c595a93f0eb421f7e1ddf95e2e0
- SHA512 8b7213abfad0798a4df1a5da870028043c058578471d5cb980e50849caa18468910c0a3fee04d7b455f252c025f4b24365702066740b83f944715f1926c9e8e7
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfo8:qUmnpomddpMOtEvwDpjjaYaFAeG/Y88
- TLSH T1CF2310386FD51A72E377DAB6C5F695C2B926B8237C129D0C50CB17410C23F52ADA2E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detection of CryptoLocker Variants
- Custom signature
Detection of Cryptolocker Samples
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE