General
- Target 2026-07-28_f62c23954dbaf89b4100d835cfbe8022_coinminer_cryptolocker_elex
- Size 49KB
- Sample260729-ac3dvacf73
- SHA256 6d6fabc1fe9c0d0e1d72b28c0d8b6227726dc82e7a9bb69a238bfbb16fe5f295
- MD5 f62c23954dbaf89b4100d835cfbe8022
- SHA1 43a237b892525e0060d45d2962c5b2c0e06554ca
- SHA512 f9c57dd33779e325c17787b1ca601dbcacdd23f9b8d8fd53779d7715a26c4bf58d1b114ddff70843a90b5d5cc1495b43128bc40d2799c8d0513c9c31a688c551
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoH:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8H
- TLSH T1973310386FD51AB2E377DAB6C5F685C2B936B8237C129D0C50CA17450C23F52ADA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-28_f62c23954dbaf89b4100d835cfbe8022_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_f62c23954dbaf89b4100d835cfbe8022_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_f62c23954dbaf89b4100d835cfbe8022_coinminer_cryptolocker_elex
- Size 49KB
- SHA256 6d6fabc1fe9c0d0e1d72b28c0d8b6227726dc82e7a9bb69a238bfbb16fe5f295
- MD5 f62c23954dbaf89b4100d835cfbe8022
- SHA1 43a237b892525e0060d45d2962c5b2c0e06554ca
- SHA512 f9c57dd33779e325c17787b1ca601dbcacdd23f9b8d8fd53779d7715a26c4bf58d1b114ddff70843a90b5d5cc1495b43128bc40d2799c8d0513c9c31a688c551
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoH:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8H
- TLSH T1973310386FD51AB2E377DAB6C5F685C2B936B8237C129D0C50CA17450C23F52ADA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE