General
- Target 2026-08-05_c1a63b6263f5fc2e31e9a56f261a7bc6_coinminer_cryptolocker_elex
- Size 66KB
- Sample260805-hkrajs1cmf
- SHA256 c22d84c6dbef1c9d8796f04787806c97fb04e2462dc465cbc85b2b7a0baf6e62
- MD5 c1a63b6263f5fc2e31e9a56f261a7bc6
- SHA1 ea9a8664555e77498a28955e890d88342f86e626
- SHA512 e53f9b7cda941deb9bac9a8117d129b2ed15955c4b41ddbe7814918e631892b825b84f3798a998bf1451c719c4263bd20d94d7131e8db0f91fb630f58f3cecbf
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtw0E:qun/VbxjgQNQXtckstOOtEvwDpjfuV
- TLSH T163630965ABD815B2E377A7759DF7C6823527BC623D21990C20CA73058C33B52A862F1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-05_c1a63b6263f5fc2e31e9a56f261a7bc6_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_c1a63b6263f5fc2e31e9a56f261a7bc6_coinminer_cryptolocker_elex
- Size 66KB
- SHA256 c22d84c6dbef1c9d8796f04787806c97fb04e2462dc465cbc85b2b7a0baf6e62
- MD5 c1a63b6263f5fc2e31e9a56f261a7bc6
- SHA1 ea9a8664555e77498a28955e890d88342f86e626
- SHA512 e53f9b7cda941deb9bac9a8117d129b2ed15955c4b41ddbe7814918e631892b825b84f3798a998bf1451c719c4263bd20d94d7131e8db0f91fb630f58f3cecbf
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtw0E:qun/VbxjgQNQXtckstOOtEvwDpjfuV
- TLSH T163630965ABD815B2E377A7759DF7C6823527BC623D21990C20CA73058C33B52A862F1F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE