General
- Target 2026-07-24_2868f519ad41b66adbba9c3d130173e9_amadey_coinminer_cryptolocker_elex_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- Sample260724-1yf1vaed83
- SHA256 f08ad4694770fe41b80cc7a311d049e0a8ba505ba735d80f55d5566f52fe0854
- MD5 2868f519ad41b66adbba9c3d130173e9
- SHA1 ad5ffaa88d0eb034721c850427dd4c00fdeac275
- SHA512 120771185425e0ab663a03064b41bb9411426c2291341c72da05faf39a309d4f45d9689984a26cb9904134b75ded47bccf823b6dd4c6e06c57ec66ee521d529a
- SSDEEP 24576:uvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:uHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T1F3858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-24_2868f519ad41b66adbba9c3d130173e9_amadey_coinminer_cryptolocker_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_2868f519ad41b66adbba9c3d130173e9_amadey_coinminer_cryptolocker_elex_smoke-loader_stealc_stop_tofsee
- Size 1.7MB
- SHA256 f08ad4694770fe41b80cc7a311d049e0a8ba505ba735d80f55d5566f52fe0854
- MD5 2868f519ad41b66adbba9c3d130173e9
- SHA1 ad5ffaa88d0eb034721c850427dd4c00fdeac275
- SHA512 120771185425e0ab663a03064b41bb9411426c2291341c72da05faf39a309d4f45d9689984a26cb9904134b75ded47bccf823b6dd4c6e06c57ec66ee521d529a
- SSDEEP 24576:uvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:uHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T1F3858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory