General
- Target 2026-07-31_7b9eb033e2b4c101f2adbe2e58165ab9_coinminer_cryptolocker_elex
- Size 36KB
- Sample260731-h6d74scl2s
- SHA256 f94ceee30b88a6be4f6c1c2f7fc3a81cd31304d08801fd068dc7a371e00891ef
- MD5 7b9eb033e2b4c101f2adbe2e58165ab9
- SHA1 febb391f9a995561351f47bf8e327c4b07e06575
- SHA512 7202a7a7755e0ade18914bba75f4925458c81dac6a533c43fe0fccfeccc7d7bc2d55111173c8172e139bd22cefe50879b4f6b91176f2b8847aedb0c64d2254b9
- SSDEEP 768:bFgm5zusFUB2preAr+Ofjg0STX73OBqgazTDOH:bFgmpiifY+YgaHKH
- TLSH T163F284386FD92A72E37BDA7595F691C7B934B4227D02980D54CE53880C33F52EDA1A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_7b9eb033e2b4c101f2adbe2e58165ab9_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_7b9eb033e2b4c101f2adbe2e58165ab9_coinminer_cryptolocker_elex
- Size 36KB
- SHA256 f94ceee30b88a6be4f6c1c2f7fc3a81cd31304d08801fd068dc7a371e00891ef
- MD5 7b9eb033e2b4c101f2adbe2e58165ab9
- SHA1 febb391f9a995561351f47bf8e327c4b07e06575
- SHA512 7202a7a7755e0ade18914bba75f4925458c81dac6a533c43fe0fccfeccc7d7bc2d55111173c8172e139bd22cefe50879b4f6b91176f2b8847aedb0c64d2254b9
- SSDEEP 768:bFgm5zusFUB2preAr+Ofjg0STX73OBqgazTDOH:bFgmpiifY+YgaHKH
- TLSH T163F284386FD92A72E37BDA7595F691C7B934B4227D02980D54CE53880C33F52EDA1A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE