General
- Target 2026-07-24_cf4f0c678bf104715e64bd51ed3ee804_coinminer_cryptolocker_elex
- Size 71KB
- Sample260724-kseylavyft
- SHA256 7e992f2c696bbd07611125156edccf86da859524638c5d2c597cd76eec145acc
- MD5 cf4f0c678bf104715e64bd51ed3ee804
- SHA1 27191906be14e395d2e1483b92735aef39ae6d33
- SHA512 03e3655caa77e666b0e02045daf3d54f85a00dbddb535c52facec530ca1edb6aae715f954c7413abde580a84165ec42d7f70fb03fbef3646eceb5f313e136893
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8w:76a+CdOOtEvwDpjQ9r
- TLSH T1927340386FD51A72E3B7CAB585F681C3B936B8223822990D50CE17454C33F56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-24_cf4f0c678bf104715e64bd51ed3ee804_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-24_cf4f0c678bf104715e64bd51ed3ee804_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-24_cf4f0c678bf104715e64bd51ed3ee804_coinminer_cryptolocker_elex
- Size 71KB
- SHA256 7e992f2c696bbd07611125156edccf86da859524638c5d2c597cd76eec145acc
- MD5 cf4f0c678bf104715e64bd51ed3ee804
- SHA1 27191906be14e395d2e1483b92735aef39ae6d33
- SHA512 03e3655caa77e666b0e02045daf3d54f85a00dbddb535c52facec530ca1edb6aae715f954c7413abde580a84165ec42d7f70fb03fbef3646eceb5f313e136893
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8w:76a+CdOOtEvwDpjQ9r
- TLSH T1927340386FD51A72E3B7CAB585F681C3B936B8223822990D50CE17454C33F56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE