General
- Target 2026-08-03_8c3fe080c4b1a7421d33629516155964_coinminer_cryptolocker_elex
- Size 70KB
- Sample260803-nmbwjagg47
- SHA256 8cb3472808537e9362ff7821b11d58fc14bb4ca23c5d835cbaea34be43c72b05
- MD5 8c3fe080c4b1a7421d33629516155964
- SHA1 07d1769d0de206dd18f5c61c6af376825db121e4
- SHA512 2057305af63c845ebabc1c717ba501e088a4890e7c1bf17c44ea398ea3de7826feebdfe1cbcd7f5a530007e37bdffd775c474dc7dbab95104059788be07d7a36
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8f:76a+CdOOtEvwDpjQ98
- TLSH T1206340396FD51A72E3B7CAB585F681C3B936B8233922990D50CE17414C33B56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_8c3fe080c4b1a7421d33629516155964_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_8c3fe080c4b1a7421d33629516155964_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_8c3fe080c4b1a7421d33629516155964_coinminer_cryptolocker_elex
- Size 70KB
- SHA256 8cb3472808537e9362ff7821b11d58fc14bb4ca23c5d835cbaea34be43c72b05
- MD5 8c3fe080c4b1a7421d33629516155964
- SHA1 07d1769d0de206dd18f5c61c6af376825db121e4
- SHA512 2057305af63c845ebabc1c717ba501e088a4890e7c1bf17c44ea398ea3de7826feebdfe1cbcd7f5a530007e37bdffd775c474dc7dbab95104059788be07d7a36
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8f:76a+CdOOtEvwDpjQ98
- TLSH T1206340396FD51A72E3B7CAB585F681C3B936B8233922990D50CE17414C33B56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE