General
- Target 2026-08-01_a46903dd8ea8fb953e5ef330ba2fcb78_coinminer_cryptolocker_elex
- Size 70KB
- Sample260801-qdft8sba87
- SHA256 c1cf67bada7aa38fa5279365b7d255dcb5fae80e8a9e8cd1a3aabe11769725d2
- MD5 a46903dd8ea8fb953e5ef330ba2fcb78
- SHA1 a6951ce63ddec82c3039e177603df80fbd4b9b1c
- SHA512 25059200bb58660844ab5684e792c7ccbdd3b8a01cf37063ab5834d8edb6a1a60d36caccaf7ec70f57867ec87d46a43a087c5ef2ebba57deda3af1109448ca2e
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y83:76a+CdOOtEvwDpjQ98
- TLSH T1BF6340396FD51A72E3B7CAB585F681C3B936B8233922990D50CE17414C33B56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-01_a46903dd8ea8fb953e5ef330ba2fcb78_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_a46903dd8ea8fb953e5ef330ba2fcb78_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_a46903dd8ea8fb953e5ef330ba2fcb78_coinminer_cryptolocker_elex
- Size 70KB
- SHA256 c1cf67bada7aa38fa5279365b7d255dcb5fae80e8a9e8cd1a3aabe11769725d2
- MD5 a46903dd8ea8fb953e5ef330ba2fcb78
- SHA1 a6951ce63ddec82c3039e177603df80fbd4b9b1c
- SHA512 25059200bb58660844ab5684e792c7ccbdd3b8a01cf37063ab5834d8edb6a1a60d36caccaf7ec70f57867ec87d46a43a087c5ef2ebba57deda3af1109448ca2e
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y83:76a+CdOOtEvwDpjQ98
- TLSH T1BF6340396FD51A72E3B7CAB585F681C3B936B8233922990D50CE17414C33B56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE