General
- Target 2026-07-19_4157630835f9a95d7270af3aa4d705d3_coinminer_cryptolocker_elex
- Size 71KB
- Sample260720-bz74aabx4q
- SHA256 659f7e31e298b73b9baa94439866d4e6098b9b0b9f24c0beb11c98d075a2470f
- MD5 4157630835f9a95d7270af3aa4d705d3
- SHA1 b19e4cd63b9284c0c571168477e5d79713e9658b
- SHA512 2b80f9ea1e69733658aa2f421383a982b6538af69b7211524f67835139c5d856582ff832f04b2e80f9fb116fd279853bddcb1713f8cdc68f7a03cdcc567ebd2c
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8z:76a+CdOOtEvwDpjQ9o
- TLSH T1EE6340396FD51A72E3B7CAB585F681C3B936B8233822990D50CE17414C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-19_4157630835f9a95d7270af3aa4d705d3_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_4157630835f9a95d7270af3aa4d705d3_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_4157630835f9a95d7270af3aa4d705d3_coinminer_cryptolocker_elex
- Size 71KB
- SHA256 659f7e31e298b73b9baa94439866d4e6098b9b0b9f24c0beb11c98d075a2470f
- MD5 4157630835f9a95d7270af3aa4d705d3
- SHA1 b19e4cd63b9284c0c571168477e5d79713e9658b
- SHA512 2b80f9ea1e69733658aa2f421383a982b6538af69b7211524f67835139c5d856582ff832f04b2e80f9fb116fd279853bddcb1713f8cdc68f7a03cdcc567ebd2c
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8z:76a+CdOOtEvwDpjQ9o
- TLSH T1EE6340396FD51A72E3B7CAB585F681C3B936B8233822990D50CE17414C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE