General
- Target 2026-07-17_0e9bb251d632e5a9212a102c56724d08_coinminer_cryptolocker_elex
- Size 49KB
- Sample260717-3ys2hsdv9s
- SHA256 7995c907718f2fc74e9a99e69e442080276ac8ee20f99a2f5d9448f8768a9778
- MD5 0e9bb251d632e5a9212a102c56724d08
- SHA1 3cb447055c81f5a39279c9af4c631bf5c1814644
- SHA512 849fd3099bd259e8557026ceb7b9f428ea1d4c582da4dbb415e381a47234938a1905bac488a55e984820e541a160d9dbb73af100e9d11978c805d7fed4b1e118
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoJ:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8J
- TLSH T1843310386FD51AB2E377DAB6C6F685C2B935B8237C12990C40CE57450C23F52ADA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-17_0e9bb251d632e5a9212a102c56724d08_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_0e9bb251d632e5a9212a102c56724d08_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_0e9bb251d632e5a9212a102c56724d08_coinminer_cryptolocker_elex
- Size 49KB
- SHA256 7995c907718f2fc74e9a99e69e442080276ac8ee20f99a2f5d9448f8768a9778
- MD5 0e9bb251d632e5a9212a102c56724d08
- SHA1 3cb447055c81f5a39279c9af4c631bf5c1814644
- SHA512 849fd3099bd259e8557026ceb7b9f428ea1d4c582da4dbb415e381a47234938a1905bac488a55e984820e541a160d9dbb73af100e9d11978c805d7fed4b1e118
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoJ:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8J
- TLSH T1843310386FD51AB2E377DAB6C6F685C2B935B8237C12990C40CE57450C23F52ADA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE