General
- Target 2026-08-03_e5ce80dc7f388debbd0aad128fe68ae7_coinminer_cryptolocker_elex
- Size 50KB
- Sample260804-k6yymabq7x
- SHA256 1e2fa6dd572e3f899337bee610114d81111c89e92480809d8cacbbff6153936b
- MD5 e5ce80dc7f388debbd0aad128fe68ae7
- SHA1 41a930342d956048dc78071a06e3a7c331751258
- SHA512 c1b78f49fd11d62c30c61c6cd06dd08b8010264406da0e511652cedaf315fae3b53e086faf7def40693e71a0dfec0b87a5ec0003181355658aa27b1fbe458f52
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoX4:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8X4
- TLSH T1F33310386FD51AB2E377DAB6C6F685C2B935B8627C12990C40CA17450C33F52EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-03_e5ce80dc7f388debbd0aad128fe68ae7_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_e5ce80dc7f388debbd0aad128fe68ae7_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_e5ce80dc7f388debbd0aad128fe68ae7_coinminer_cryptolocker_elex
- Size 50KB
- SHA256 1e2fa6dd572e3f899337bee610114d81111c89e92480809d8cacbbff6153936b
- MD5 e5ce80dc7f388debbd0aad128fe68ae7
- SHA1 41a930342d956048dc78071a06e3a7c331751258
- SHA512 c1b78f49fd11d62c30c61c6cd06dd08b8010264406da0e511652cedaf315fae3b53e086faf7def40693e71a0dfec0b87a5ec0003181355658aa27b1fbe458f52
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoX4:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8X4
- TLSH T1F33310386FD51AB2E377DAB6C6F685C2B935B8627C12990C40CA17450C33F52EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE