2026-08-02_6206b125ed894ea61ad5a6bb5ec00475_coinminer_cryptolocker_elex

General

Target
2026-08-02_6206b125ed894ea61ad5a6bb5ec00475_coinminer_cryptolocker_elex
Size 45KB
Sample260802-npf82aywct
SHA256 d26944d0475ec371a92434d214b2cb50a99a72acfeb803cd68e5257acb4a8c35
MD5 6206b125ed894ea61ad5a6bb5ec00475
SHA1 d6d89f657d2b4824fa6a2338dc66e104ff70565c
SHA512 f21d7b9f238de86ed4e257bac0d82db24e26274c11573a44b249176e67d42ad336954ba45878f80ff75c3d43c5d34784d87c5e0fb0e34fec4ba1c70d45c2f1fb
SSDEEP 768:AcTz7y3lhsT+PRA04G7jj671a59ylqXtOOtEvwDpjf:AcT+PCoGJanicMOtEvwDpj
TLSH
T197237D63BF450E1AD4031B70793FC712A307BEDC19740686BA5A361BDF32281E666D9B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Detection of Cryptolocker Samples 1 IoCs

resource	yara_rule
sample	CryptoLocker_set1

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-02_6206b125ed894ea61ad5a6bb5ec00475_coinminer_cryptolocker_elex

2026-08-02_6206b125ed894ea61ad5a6bb5ec00475_coinminer_cryptolocker_elex

.exe 45KB

SHA256 d26944d0475ec371a92434d214b2cb50a99a72acfeb803cd68e5257acb4a8c35
MD5 6206b125ed894ea61ad5a6bb5ec00475
SHA1 d6d89f657d2b4824fa6a2338dc66e104ff70565c
SHA512 f21d7b9f238de86ed4e257bac0d82db24e26274c11573a44b249176e67d42ad336954ba45878f80ff75c3d43c5d34784d87c5e0fb0e34fec4ba1c70d45c2f1fb
SSDEEP 768:AcTz7y3lhsT+PRA04G7jj671a59ylqXtOOtEvwDpjf:AcT+PCoGJanicMOtEvwDpj
TLSH
T197237D63BF450E1AD4031B70793FC712A307BEDC19740686BA5A361BDF32281E666D9B
MD5 SHA1 SHA512 SSDEEP TLSH

Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
UPX dump on OEP (original entry point)
UPX packed file

Detects executables packed with UPX/modified UPX open source packer.

upx
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths