General
- Target 2026-07-21_a70ad6d63764701aa2ab4b1d41a60068_coinminer_cryptolocker_elex
- Size 65KB
- Sample260721-qjdxtst1es
- SHA256 a985ba74921f39d2871ed2edbafc1792b61d3edadcc064f9eed9bb588d83a168
- MD5 a70ad6d63764701aa2ab4b1d41a60068
- SHA1 e3ab8d9fd17a4e00b8e8bf528b8237266f06056a
- SHA512 929029b4b2433b17f72a3c631d739c8b14cc244333796468106ae8c422f85ac018e459cf5a6c32579ca2755c0e869793967d06112c4fd9227a8a1539d9eea1bd
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwZ:qun/VbxjgQNQXtckstOOtEvwDpjfuZ
- TLSH T169632962ABC815B2E37767759DF7C692352BBC623D36990C208E73058C337526862E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-21_a70ad6d63764701aa2ab4b1d41a60068_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_a70ad6d63764701aa2ab4b1d41a60068_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_a70ad6d63764701aa2ab4b1d41a60068_coinminer_cryptolocker_elex
- Size 65KB
- SHA256 a985ba74921f39d2871ed2edbafc1792b61d3edadcc064f9eed9bb588d83a168
- MD5 a70ad6d63764701aa2ab4b1d41a60068
- SHA1 e3ab8d9fd17a4e00b8e8bf528b8237266f06056a
- SHA512 929029b4b2433b17f72a3c631d739c8b14cc244333796468106ae8c422f85ac018e459cf5a6c32579ca2755c0e869793967d06112c4fd9227a8a1539d9eea1bd
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwZ:qun/VbxjgQNQXtckstOOtEvwDpjfuZ
- TLSH T169632962ABC815B2E37767759DF7C692352BBC623D36990C208E73058C337526862E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE