General
- Target 2026-07-12_d1b6c0c4cb7f569b1fd8e975afbec574_coinminer_cryptolocker_elex
- Size 49KB
- Sample260712-j9e49aew7j
- SHA256 685a42fa46bed42857e7321b688d538cc581601171b10f8951585ba77db3dc55
- MD5 d1b6c0c4cb7f569b1fd8e975afbec574
- SHA1 a4843b82ca785d43322f9c7ab584a69329a27dc0
- SHA512 34ae1482cf37d05a1846aae053f63fbe52728026eb4682cace00d9f53613d5c21527f1f4f5b5aadc5e0b71598c52f2874144b52ccd9a9a8c60432129c3cc3b1b
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoU:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8U
- TLSH T19C3310386FD51AB2E377DAB6C5F685C2B936B8227C12990C50CA57450C23F52ACA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-12_d1b6c0c4cb7f569b1fd8e975afbec574_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_d1b6c0c4cb7f569b1fd8e975afbec574_coinminer_cryptolocker_elex
- Size 49KB
- SHA256 685a42fa46bed42857e7321b688d538cc581601171b10f8951585ba77db3dc55
- MD5 d1b6c0c4cb7f569b1fd8e975afbec574
- SHA1 a4843b82ca785d43322f9c7ab584a69329a27dc0
- SHA512 34ae1482cf37d05a1846aae053f63fbe52728026eb4682cace00d9f53613d5c21527f1f4f5b5aadc5e0b71598c52f2874144b52ccd9a9a8c60432129c3cc3b1b
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoU:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8U
- TLSH T19C3310386FD51AB2E377DAB6C5F685C2B936B8227C12990C50CA57450C23F52ACA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE