General
- Target 2026-08-02_5bcd1939412a07046840f30400811d2b_coinminer_cryptolocker_elex
- Size 66KB
- Sample260802-kj853syfph
- SHA256 54902fa0f9e6e7b064c4143a3655c41a454ebd9f2a5c9e4b9d2b098c9c0fb1b6
- MD5 5bcd1939412a07046840f30400811d2b
- SHA1 631bfad3494d0192718809aa0381bcb34938b8e0
- SHA512 0358dc7d92b7f319e377bd45227a31f20e88e0f97eb869bf632cc3f1601810cc3720197ab3da8c646813a4c208222fbfea9544440ccbd8c56e98160cb1a893e9
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwI:qun/VbxjgQNQXtckstOOtEvwDpjfuI
- TLSH T1D2631965ABD815B2E377A7759DF7C682352BBC623D21990C20CA73058C33752A862E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-02_5bcd1939412a07046840f30400811d2b_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_5bcd1939412a07046840f30400811d2b_coinminer_cryptolocker_elex
- Size 66KB
- SHA256 54902fa0f9e6e7b064c4143a3655c41a454ebd9f2a5c9e4b9d2b098c9c0fb1b6
- MD5 5bcd1939412a07046840f30400811d2b
- SHA1 631bfad3494d0192718809aa0381bcb34938b8e0
- SHA512 0358dc7d92b7f319e377bd45227a31f20e88e0f97eb869bf632cc3f1601810cc3720197ab3da8c646813a4c208222fbfea9544440ccbd8c56e98160cb1a893e9
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwI:qun/VbxjgQNQXtckstOOtEvwDpjfuI
- TLSH T1D2631965ABD815B2E377A7759DF7C682352BBC623D21990C20CA73058C33752A862E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE