General
- Target 2026-07-14_5addd3d2c8fdec471820d405ff634cc8_coinminer_cryptolocker_elex
- Size 71KB
- Sample260714-hpcb7aav8x
- SHA256 e5bde47357016b314b7b0ea9f453374f1eccc0994e9eabb5f659374571494683
- MD5 5addd3d2c8fdec471820d405ff634cc8
- SHA1 0f5b436eadee733d935fdfe44de455ed2c7a5aa7
- SHA512 d79fcff4827abbe78dd4d0aa3a63aa2ba4c4e49881da7bc16cbfbd62019282d628de622ca7b6332271be46249489c4513231267ba06d917f889ee9711450898a
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8k:76a+CdOOtEvwDpjQ9v
- TLSH T1696340396FD51A72E3B7CAB585F781C3B936B8223822990D50CE17414C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-14_5addd3d2c8fdec471820d405ff634cc8_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_5addd3d2c8fdec471820d405ff634cc8_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_5addd3d2c8fdec471820d405ff634cc8_coinminer_cryptolocker_elex
- Size 71KB
- SHA256 e5bde47357016b314b7b0ea9f453374f1eccc0994e9eabb5f659374571494683
- MD5 5addd3d2c8fdec471820d405ff634cc8
- SHA1 0f5b436eadee733d935fdfe44de455ed2c7a5aa7
- SHA512 d79fcff4827abbe78dd4d0aa3a63aa2ba4c4e49881da7bc16cbfbd62019282d628de622ca7b6332271be46249489c4513231267ba06d917f889ee9711450898a
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8k:76a+CdOOtEvwDpjQ9v
- TLSH T1696340396FD51A72E3B7CAB585F781C3B936B8223822990D50CE17414C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE