General

  • Target
    2026-08-07_059a522348ad0b5385742dd85047350f_coinminer_cryptolocker_elex
  • Size 50KB
  • Sample260807-yr2b4abr61
  • SHA256 b6b39486b57f7106cd674940d2e43d647ca45d1084bec8497e6c768692d645e7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-07_059a522348ad0b5385742dd85047350f_coinminer_cryptolocker_elex
    • Size 50KB
    • SHA256 b6b39486b57f7106cd674940d2e43d647ca45d1084bec8497e6c768692d645e7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detection of CryptoLocker Variants

    • Detection of Cryptolocker Samples

    • UPX dump on OEP (original entry point)

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks