General
- Target 2026-08-04_f9881c8a6bd9c2bcee7d63210772e5aa_coinminer_cryptolocker_elex
- Size 50KB
- Sample260804-qn8yrs1glc
- SHA256 9871239432504308620dd66d9db88495a755dcfd0fb96197abaf9e7df38792c9
- MD5 f9881c8a6bd9c2bcee7d63210772e5aa
- SHA1 7c32f83ab1b9a37b1aced7f6c279065c3340ed3a
- SHA512 3ec7ec7812885fd8b5ece207c76680cb4820c996df94831b0968f9931f96c5d34b148eb3ab0440ff339062d09975823885d5d623199e3bc37e9a6f6e22f49cba
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoX/:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8X/
- TLSH T1F93310386FD51AB2E377DAB6C6F685C2B935B8627C12990C40CA17450C33F52EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-04_f9881c8a6bd9c2bcee7d63210772e5aa_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_f9881c8a6bd9c2bcee7d63210772e5aa_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_f9881c8a6bd9c2bcee7d63210772e5aa_coinminer_cryptolocker_elex
- Size 50KB
- SHA256 9871239432504308620dd66d9db88495a755dcfd0fb96197abaf9e7df38792c9
- MD5 f9881c8a6bd9c2bcee7d63210772e5aa
- SHA1 7c32f83ab1b9a37b1aced7f6c279065c3340ed3a
- SHA512 3ec7ec7812885fd8b5ece207c76680cb4820c996df94831b0968f9931f96c5d34b148eb3ab0440ff339062d09975823885d5d623199e3bc37e9a6f6e22f49cba
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoX/:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8X/
- TLSH T1F93310386FD51AB2E377DAB6C6F685C2B935B8627C12990C40CA17450C33F52EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE