Analysis
- max time kernel
148s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
08/08/2026, 10:52
Behavioral task
behavioral1
Sample
2026-08-08_54af789d9fea013a7fc80b38d4fd0159_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
General
- Target 2026-08-08_54af789d9fea013a7fc80b38d4fd0159_coinminer_cryptolocker_elex.exe
- Size 43KB
- Sample260808-mytp2sdr3z
- SHA256 52fde59d352b21b7af9731e5b8cd0f8f86ef6eb28598b8c79f078abd76c8bd08
- MD5 54af789d9fea013a7fc80b38d4fd0159
- SHA1 28fd0e5a6328427d62c079a42ae3d560e5bbe392
- SHA512 b31eaa212b63d5a997bfbe2e397cc5fe2afa5c3ba157237b3a0c73d5d8bc5654a8d82059e37af9fb9207322097d4989deb9db4cd5795072858c1e5d424bc4f44
- SSDEEP 768:Pq6LsoEEeegiZPvEhHSG+gGum/kLyMro2GtOOtEvwDpjr:Pq6QFElP6n+g/mddpMOtEvwDpj
- TLSH T1FA135AB3AA450D4BDC832B70987FC613B24BBEAE02740786754D3617DF72146E626D8B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Custom signatureDetection of CryptoLocker Variants 1 IoCs
resource yara_rule behavioral2/memory/684-0-0x0000000000500000-0x0000000000510000-memory.dmp CryptoLocker_rule2 - Custom signatureDetection of Cryptolocker Samples 1 IoCs
resource yara_rule behavioral2/memory/684-0-0x0000000000500000-0x0000000000510000-memory.dmp CryptoLocker_set1 - Custom signatureUPX dump on OEP (original entry point) 1 IoCs
resource yara_rule behavioral2/memory/684-0-0x0000000000500000-0x0000000000510000-memory.dmp UPX -
resource yara_rule behavioral2/memory/684-0-0x0000000000500000-0x0000000000510000-memory.dmp upx - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2026-08-08_54af789d9fea013a7fc80b38d4fd0159_coinminer_cryptolocker_elex.exe