General
- Target 2026-07-31_a5bc1d1f00ea4aeedde2f7161027be40_coinminer_cryptolocker_elex
- Size 120KB
- Sample260731-k3z2hsfh44
- SHA256 6eeda4ca7c1b7a1462a5aa329eae8b92a02da6d3174eac5a86f3647a029440bb
- MD5 a5bc1d1f00ea4aeedde2f7161027be40
- SHA1 11ed53defd5a90987d399c718fa23bfed4b93682
- SHA512 46f5b0f2a7854acd006b513408203e4e86bb64c5f2a8e3a5f0b3e33efc6b9b88b560b3d0afc47445f3673807b232c607fa247d624fabe1bd29094a2bf5439925
- SSDEEP 384:a6ivX3fyIDvDl1ovmXAw9PMDREhi9OUSPlRxMc/cipTYnh66gEgaq1nLfjDDxsq:a6U3fFzDOw9Uiayc6nEqfjGq
- TLSH T1D4C38D32BF2A6C55E46A3B7020F7920195BC7D542B3C068FFCCFB75DABB49A2A412055
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-07-31_a5bc1d1f00ea4aeedde2f7161027be40_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_a5bc1d1f00ea4aeedde2f7161027be40_coinminer_cryptolocker_elex
- Size 120KB
- SHA256 6eeda4ca7c1b7a1462a5aa329eae8b92a02da6d3174eac5a86f3647a029440bb
- MD5 a5bc1d1f00ea4aeedde2f7161027be40
- SHA1 11ed53defd5a90987d399c718fa23bfed4b93682
- SHA512 46f5b0f2a7854acd006b513408203e4e86bb64c5f2a8e3a5f0b3e33efc6b9b88b560b3d0afc47445f3673807b232c607fa247d624fabe1bd29094a2bf5439925
- SSDEEP 384:a6ivX3fyIDvDl1ovmXAw9PMDREhi9OUSPlRxMc/cipTYnh66gEgaq1nLfjDDxsq:a6U3fFzDOw9Uiayc6nEqfjGq
- TLSH T1D4C38D32BF2A6C55E46A3B7020F7920195BC7D542B3C068FFCCFB75DABB49A2A412055
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE