General
- Target 2026-07-31_3c225936cd099df6ac7a141a2606998b_coinminer_cryptolocker_elex
- Size 26KB
- Sample260731-xarkwsel4s
- SHA256 5ef7d119a518b8b5bfac7a2d52f449c064c3ffbfa5730862b88cea26ea24a7c5
- MD5 3c225936cd099df6ac7a141a2606998b
- SHA1 886cee5b72369ad1d593c406a1fd8a3fd79ecc43
- SHA512 4e2b27d18c0e4cd3350b19af28d8bf9febf81c86995f7753206b79b2bc6e693a9f3999d20752f9269c5776793b2cc5f6733553f3e84a9904d7f285dd9d6d3691
- SSDEEP 192:gf85bTA1Wm4wtaTJlRGt+1sKYdK8LKUc+BxJ6wfHsoh5O9iuOjAwNpV4c4/m2fcR:gf85/A1U5rRGTxKaFfhU8J/zz47Frs
- TLSH T18DC2F630BBF89D61E377853404F7F6A0642ABD513E0A961E765AF38C0933B50A8A0F1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-07-31_3c225936cd099df6ac7a141a2606998b_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_3c225936cd099df6ac7a141a2606998b_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_3c225936cd099df6ac7a141a2606998b_coinminer_cryptolocker_elex
- Size 26KB
- SHA256 5ef7d119a518b8b5bfac7a2d52f449c064c3ffbfa5730862b88cea26ea24a7c5
- MD5 3c225936cd099df6ac7a141a2606998b
- SHA1 886cee5b72369ad1d593c406a1fd8a3fd79ecc43
- SHA512 4e2b27d18c0e4cd3350b19af28d8bf9febf81c86995f7753206b79b2bc6e693a9f3999d20752f9269c5776793b2cc5f6733553f3e84a9904d7f285dd9d6d3691
- SSDEEP 192:gf85bTA1Wm4wtaTJlRGt+1sKYdK8LKUc+BxJ6wfHsoh5O9iuOjAwNpV4c4/m2fcR:gf85/A1U5rRGTxKaFfhU8J/zz47Frs
- TLSH T18DC2F630BBF89D61E377853404F7F6A0642ABD513E0A961E765AF38C0933B50A8A0F1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE