General
- Target 2026-06-27_a0ab45bb95fbe066563ed1a080bd8349_coinminer_cryptolocker_elex
- Size 65KB
- Sample260629-e5dcmset5l
- SHA256 2865f103634b205cd8c3ee9f72f2def64bdbed574dead585629a3c25e97612c8
- MD5 a0ab45bb95fbe066563ed1a080bd8349
- SHA1 5ae544691467f6dd405aed5ddd6a14c13b8fbeeb
- SHA512 a7286807278f3c7f3ff471944a2680f3ad85d2b11f2eea87ac94447b9e9b14e3ca808da815cd4e4919c57d2711f8e2d63c61e0a9110fda603e432c8cff71ae01
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwRm:qun/VbxjgQNQXtckstOOtEvwDpjfuRm
- TLSH T190632966ABC815B2E33767759CB7CA423517BC663D359A0C208A73068D337536862E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-06-27_a0ab45bb95fbe066563ed1a080bd8349_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_a0ab45bb95fbe066563ed1a080bd8349_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260618-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_a0ab45bb95fbe066563ed1a080bd8349_coinminer_cryptolocker_elex
- Size 65KB
- SHA256 2865f103634b205cd8c3ee9f72f2def64bdbed574dead585629a3c25e97612c8
- MD5 a0ab45bb95fbe066563ed1a080bd8349
- SHA1 5ae544691467f6dd405aed5ddd6a14c13b8fbeeb
- SHA512 a7286807278f3c7f3ff471944a2680f3ad85d2b11f2eea87ac94447b9e9b14e3ca808da815cd4e4919c57d2711f8e2d63c61e0a9110fda603e432c8cff71ae01
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwRm:qun/VbxjgQNQXtckstOOtEvwDpjfuRm
- TLSH T190632966ABC815B2E33767759CB7CA423517BC663D359A0C208A73068D337536862E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE