General
- Target 2026-07-12_87427f8547559572c782152e4b1b4639_coinminer_cryptolocker_elex
- Size 65KB
- Sample260712-kztekahs3v
- SHA256 5a966ec8da3d6c9eca64a5b82d913379df0128f46a623ee84aa5205c43398d95
- MD5 87427f8547559572c782152e4b1b4639
- SHA1 d52f9dad6d6be2bd3c87cb4e6d4299d97bac6915
- SHA512 17295c8ad111e948f122ff254f8c3ba5816c537ec0d509e5fb7a6f45ff047a5936493640dc92ca6f212a847721ec6fa8116a5bbf7b4c635a51e4d7c6aaf84e49
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwJ:qun/VbxjgQNQXtckstOOtEvwDpjfuJ
- TLSH T13A631966ABC815B2E37767759CF7C6823527BC663D369A0C208E73058C337526862E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-12_87427f8547559572c782152e4b1b4639_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_87427f8547559572c782152e4b1b4639_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_87427f8547559572c782152e4b1b4639_coinminer_cryptolocker_elex
- Size 65KB
- SHA256 5a966ec8da3d6c9eca64a5b82d913379df0128f46a623ee84aa5205c43398d95
- MD5 87427f8547559572c782152e4b1b4639
- SHA1 d52f9dad6d6be2bd3c87cb4e6d4299d97bac6915
- SHA512 17295c8ad111e948f122ff254f8c3ba5816c537ec0d509e5fb7a6f45ff047a5936493640dc92ca6f212a847721ec6fa8116a5bbf7b4c635a51e4d7c6aaf84e49
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwJ:qun/VbxjgQNQXtckstOOtEvwDpjfuJ
- TLSH T13A631966ABC815B2E37767759CF7C6823527BC663D369A0C208E73058C337526862E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE