General

  • Target
    2026-07-27_40f35700814b8114d1a136c77e9729df_coinminer_cryptolocker_elex
  • Size 50KB
  • Sample260727-t16wqaca73
  • SHA256 0b1021b470598194460d4619e9c5d001f6f82ea53bce26b8a497ce84c348da4c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-07-27_40f35700814b8114d1a136c77e9729df_coinminer_cryptolocker_elex
    • Size 50KB
    • SHA256 0b1021b470598194460d4619e9c5d001f6f82ea53bce26b8a497ce84c348da4c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks