General
- Target 2026-08-04_03801fb1ff7bb7a89621efce7e473e1c_coinminer_cryptolocker_elex
- Size 50KB
- Sample260804-vcj8gsvgnb
- SHA256 d07fa0f0acddb7386fddd70600fb9beb2aa368d11bab43f658b7580e6891dd96
- MD5 03801fb1ff7bb7a89621efce7e473e1c
- SHA1 cffc52f0e2287491999d9f59cc3375177e6d473d
- SHA512 2773d684117a796e4e6d811b58c81e95c61f952494614cb265be480594a0c00dba1bcdf527d7fdde565c0fb6cefa902be790af1234c748d937996a3453c29a8f
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoXt:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8Xt
- TLSH T1E83310386FD51AB2E377DAB6C6F685C2B935B8627C12990C40CA17450C33F52EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_03801fb1ff7bb7a89621efce7e473e1c_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_03801fb1ff7bb7a89621efce7e473e1c_coinminer_cryptolocker_elex
- Size 50KB
- SHA256 d07fa0f0acddb7386fddd70600fb9beb2aa368d11bab43f658b7580e6891dd96
- MD5 03801fb1ff7bb7a89621efce7e473e1c
- SHA1 cffc52f0e2287491999d9f59cc3375177e6d473d
- SHA512 2773d684117a796e4e6d811b58c81e95c61f952494614cb265be480594a0c00dba1bcdf527d7fdde565c0fb6cefa902be790af1234c748d937996a3453c29a8f
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfoXt:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8Xt
- TLSH T1E83310386FD51AB2E377DAB6C6F685C2B935B8627C12990C40CA17450C33F52EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE