General
- Target 2026-07-28_7da1751eb07651ab1112c5662fdc6f44_coinminer_cryptolocker_elex
- Size 65KB
- Sample260728-ge83qszvf1
- SHA256 232212434c15ea142be9064d75808e8587b3ca2e2a2ca85b1ad9630ff235d47f
- MD5 7da1751eb07651ab1112c5662fdc6f44
- SHA1 4049f738938b0bd8e39cda16c5ab51ccc3032add
- SHA512 660213fe616e8e8828562a6aaa9463369f924405785e3e54a295caf52538331b7431de55964a4c7bb7de04d7e104bee61d8c9f404561fa3f3aeae28903cd1ac3
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwc:qun/VbxjgQNQXtckstOOtEvwDpjfuc
- TLSH T177631A66ABC815B2E377A7759DF7C682352BBC663D31990C208A73058C337526862E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-28_7da1751eb07651ab1112c5662fdc6f44_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_7da1751eb07651ab1112c5662fdc6f44_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_7da1751eb07651ab1112c5662fdc6f44_coinminer_cryptolocker_elex
- Size 65KB
- SHA256 232212434c15ea142be9064d75808e8587b3ca2e2a2ca85b1ad9630ff235d47f
- MD5 7da1751eb07651ab1112c5662fdc6f44
- SHA1 4049f738938b0bd8e39cda16c5ab51ccc3032add
- SHA512 660213fe616e8e8828562a6aaa9463369f924405785e3e54a295caf52538331b7431de55964a4c7bb7de04d7e104bee61d8c9f404561fa3f3aeae28903cd1ac3
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwc:qun/VbxjgQNQXtckstOOtEvwDpjfuc
- TLSH T177631A66ABC815B2E377A7759DF7C682352BBC663D31990C208A73058C337526862E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE