General
- Target 2026-07-29_0184ad5ee219c1c5697e9158607dd0af_coinminer_cryptolocker_elex
- Size 56KB
- Sample260729-tnld9abc42
- SHA256 814819df977308c72c933e2aadb41a86775843b78ea2cd643c4405898f369c39
- MD5 0184ad5ee219c1c5697e9158607dd0af
- SHA1 56f1905f93844210641593a38b5868bb0c92980a
- SHA512 c3068d98a5af83037e152af4109ad0d945e96e90748bb5a102bc3ebf9c5885f9d1ddb19508c42a72aaac981ede63a402df2e727b4d407f50ffef517c770f3051
- SSDEEP 768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjlYBm:bP9g/xtCS3Dxx0L8
- TLSH T17543B4386EE55A72D377C5B684F7A1C2B976BC227912891E91CF63490833B43FC90A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-29_0184ad5ee219c1c5697e9158607dd0af_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_0184ad5ee219c1c5697e9158607dd0af_coinminer_cryptolocker_elex
- Size 56KB
- SHA256 814819df977308c72c933e2aadb41a86775843b78ea2cd643c4405898f369c39
- MD5 0184ad5ee219c1c5697e9158607dd0af
- SHA1 56f1905f93844210641593a38b5868bb0c92980a
- SHA512 c3068d98a5af83037e152af4109ad0d945e96e90748bb5a102bc3ebf9c5885f9d1ddb19508c42a72aaac981ede63a402df2e727b4d407f50ffef517c770f3051
- SSDEEP 768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjlYBm:bP9g/xtCS3Dxx0L8
- TLSH T17543B4386EE55A72D377C5B684F7A1C2B976BC227912891E91CF63490833B43FC90A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE