General
- Target 2026-07-29_bd7fb2f13889e21c1d54e7a00b924e64_coinminer_cryptolocker_elex
- Size 75KB
- Sample260729-ld7whazhpd
- SHA256 540076d164d40f6543942b82aac652c871133fce800810446a14aa96ae74b8b8
- MD5 bd7fb2f13889e21c1d54e7a00b924e64
- SHA1 339bc3715ff021edb8e222f5442381856b62dbff
- SHA512 622219ea4c902cd14ecadb7c7c7f9f904a00a3be2a929e96292357a0f173c8b175bdc7d72f71643dd4d59b93f87ad11c47d7396d35ae075d9ea79269d827ef7c
- SSDEEP 1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalDSJy:1nK6a+qdOOtEvwDpjW
- TLSH T149735039AED41972E3B7DAB5C9F681C3B926B8223D21980D50CA13454C33F56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-29_bd7fb2f13889e21c1d54e7a00b924e64_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_bd7fb2f13889e21c1d54e7a00b924e64_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_bd7fb2f13889e21c1d54e7a00b924e64_coinminer_cryptolocker_elex
- Size 75KB
- SHA256 540076d164d40f6543942b82aac652c871133fce800810446a14aa96ae74b8b8
- MD5 bd7fb2f13889e21c1d54e7a00b924e64
- SHA1 339bc3715ff021edb8e222f5442381856b62dbff
- SHA512 622219ea4c902cd14ecadb7c7c7f9f904a00a3be2a929e96292357a0f173c8b175bdc7d72f71643dd4d59b93f87ad11c47d7396d35ae075d9ea79269d827ef7c
- SSDEEP 1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalDSJy:1nK6a+qdOOtEvwDpjW
- TLSH T149735039AED41972E3B7DAB5C9F681C3B926B8223D21980D50CA13454C33F56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE