General
- Target 2026-07-13_267cf0e0c56d8bf9430df419d20896e3_coinminer_cryptolocker_elex
- Size 49KB
- Sample260713-k2saaaex7p
- SHA256 da7ede436ca453222aaef318446cf0f5487e77474e3d4964e2e2744504254a04
- MD5 267cf0e0c56d8bf9430df419d20896e3
- SHA1 bebced5e8d46b53fa3aae156466be1bda5778c3e
- SHA512 65ede993af978b7554be4ba7972d6f572c42c7d15a26d2b9f4047aefb6139eaa5396d942dfbb6cca9a619b34d827377d6335d9649c574fe9ed2acbe72f8a36b9
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoG:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8G
- TLSH T1713310386FD51AB2E377DAB6C6F685C2B935B8237C12990C50CA57450C33F52ACA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-13_267cf0e0c56d8bf9430df419d20896e3_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_267cf0e0c56d8bf9430df419d20896e3_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_267cf0e0c56d8bf9430df419d20896e3_coinminer_cryptolocker_elex
- Size 49KB
- SHA256 da7ede436ca453222aaef318446cf0f5487e77474e3d4964e2e2744504254a04
- MD5 267cf0e0c56d8bf9430df419d20896e3
- SHA1 bebced5e8d46b53fa3aae156466be1bda5778c3e
- SHA512 65ede993af978b7554be4ba7972d6f572c42c7d15a26d2b9f4047aefb6139eaa5396d942dfbb6cca9a619b34d827377d6335d9649c574fe9ed2acbe72f8a36b9
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoG:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8G
- TLSH T1713310386FD51AB2E377DAB6C6F685C2B935B8237C12990C50CA57450C33F52ACA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE