General
- Target 2026-07-10_faab299823ae28d974f4c1fdab06b565_coinminer_cryptolocker_elex
- Size 49KB
- Sample260710-hfcxcsfz3v
- SHA256 8400f436749d2e3b63c240001e4d5dcc8564f880d2f2ff763e0b6f868ac587c7
- MD5 faab299823ae28d974f4c1fdab06b565
- SHA1 d6a129c4c26f36f7a84ee7639542e48e92265afb
- SHA512 b5581670354783dbefd57f693dccb3613577aaa717b23fbd7587423e76c58abe2b09c0fe38514b68b83973c9f9066221d624e559044ffb3553b704676cb1354d
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfos:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8s
- TLSH T1193310386FD51AB2E377DAB6C5F685C2B936B8237C129D0C50CA17450C23F52ADA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-10_faab299823ae28d974f4c1fdab06b565_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-10_faab299823ae28d974f4c1fdab06b565_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-10_faab299823ae28d974f4c1fdab06b565_coinminer_cryptolocker_elex
- Size 49KB
- SHA256 8400f436749d2e3b63c240001e4d5dcc8564f880d2f2ff763e0b6f868ac587c7
- MD5 faab299823ae28d974f4c1fdab06b565
- SHA1 d6a129c4c26f36f7a84ee7639542e48e92265afb
- SHA512 b5581670354783dbefd57f693dccb3613577aaa717b23fbd7587423e76c58abe2b09c0fe38514b68b83973c9f9066221d624e559044ffb3553b704676cb1354d
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfos:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8s
- TLSH T1193310386FD51AB2E377DAB6C5F685C2B936B8237C129D0C50CA17450C23F52ADA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE