General
- Target 2026-07-27_57d0a55f433696306cadce12c3cb8a3f_coinminer_cryptolocker_elex
- Size 50KB
- Sample260727-kcn7bsaa97
- SHA256 f277318bc2dc933deb0c8da5a5782fa055a4000b4296f6cff880df1bc15d1743
- MD5 57d0a55f433696306cadce12c3cb8a3f
- SHA1 5e66b12a0b76731d5ff549475bc4b5c6033d93f4
- SHA512 25cc08cba1f4879120e92ab87142ade77c121961d45cd443835ca2cd78c70d0040f346ac70f35dce49a822d929a47f3fc86d127ce4d7844060e14c0c9860c468
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoI:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8I
- TLSH T1A23310386FD51AB2E377DAB6C6F685C2B835B8627C12990C40CA57450C33F52EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-27_57d0a55f433696306cadce12c3cb8a3f_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-27_57d0a55f433696306cadce12c3cb8a3f_coinminer_cryptolocker_elex
- Size 50KB
- SHA256 f277318bc2dc933deb0c8da5a5782fa055a4000b4296f6cff880df1bc15d1743
- MD5 57d0a55f433696306cadce12c3cb8a3f
- SHA1 5e66b12a0b76731d5ff549475bc4b5c6033d93f4
- SHA512 25cc08cba1f4879120e92ab87142ade77c121961d45cd443835ca2cd78c70d0040f346ac70f35dce49a822d929a47f3fc86d127ce4d7844060e14c0c9860c468
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoI:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8I
- TLSH T1A23310386FD51AB2E377DAB6C6F685C2B835B8627C12990C40CA57450C33F52EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE