General
- Target 2026-07-14_68486390ffa151e3f8b80e10798f8ed2_coinminer_cryptolocker_elex
- Size 71KB
- Sample260714-hlhd2af18p
- SHA256 44abdfe21389eb5d17f51be5089cf8d1bf846571c7f35513699b8d8caf3a4f77
- MD5 68486390ffa151e3f8b80e10798f8ed2
- SHA1 72306a0243165b4e8d803b248b06332ffab3f8e9
- SHA512 d581f6f26ef0f64599d1cb4221dbade9ed83791320d3cf41f2b248e55c9d6d12d4e32866f93503bfc8333a624a6ace39f9b2b40b5c24850242333b07736976da
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8m:76a+CdOOtEvwDpjQ9J
- TLSH T1166340396FD51A72E3B7CAB585F681C3B936B8223822990D50CE17414C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-14_68486390ffa151e3f8b80e10798f8ed2_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_68486390ffa151e3f8b80e10798f8ed2_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_68486390ffa151e3f8b80e10798f8ed2_coinminer_cryptolocker_elex
- Size 71KB
- SHA256 44abdfe21389eb5d17f51be5089cf8d1bf846571c7f35513699b8d8caf3a4f77
- MD5 68486390ffa151e3f8b80e10798f8ed2
- SHA1 72306a0243165b4e8d803b248b06332ffab3f8e9
- SHA512 d581f6f26ef0f64599d1cb4221dbade9ed83791320d3cf41f2b248e55c9d6d12d4e32866f93503bfc8333a624a6ace39f9b2b40b5c24850242333b07736976da
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8m:76a+CdOOtEvwDpjQ9J
- TLSH T1166340396FD51A72E3B7CAB585F681C3B936B8223822990D50CE17414C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE