General
- Target 2026-07-31_a49b8c12bd3bad2fb9007e7b6339cdcf_coinminer_cryptolocker_elex
- Size 70KB
- Sample260731-3e72bsad35
- SHA256 f294d1b567fe3399f61f2a1fb22b75498112b3a8a46704603e737516858dd6f6
- MD5 a49b8c12bd3bad2fb9007e7b6339cdcf
- SHA1 3f634b6ea31352641dcec650c252049bbfb0fa1f
- SHA512 587d5c49f0d8ffcec106d6ba4a355b73b439d482e6db6a2e5a628874decc26f4fc94cae83d815b8744fcd53498356e9dfa116082623f3a395c7f5ea86225766b
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8v:76a+CdOOtEvwDpjQ9k
- TLSH T1FA6340396FD51A72E3B7CAB585F681C3B936B8233922990D50CE17414C33B56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_a49b8c12bd3bad2fb9007e7b6339cdcf_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_a49b8c12bd3bad2fb9007e7b6339cdcf_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_a49b8c12bd3bad2fb9007e7b6339cdcf_coinminer_cryptolocker_elex
- Size 70KB
- SHA256 f294d1b567fe3399f61f2a1fb22b75498112b3a8a46704603e737516858dd6f6
- MD5 a49b8c12bd3bad2fb9007e7b6339cdcf
- SHA1 3f634b6ea31352641dcec650c252049bbfb0fa1f
- SHA512 587d5c49f0d8ffcec106d6ba4a355b73b439d482e6db6a2e5a628874decc26f4fc94cae83d815b8744fcd53498356e9dfa116082623f3a395c7f5ea86225766b
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8v:76a+CdOOtEvwDpjQ9k
- TLSH T1FA6340396FD51A72E3B7CAB585F681C3B936B8233922990D50CE17414C33B56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE