General
- Target 2026-08-09_ddf0dfa853586b96253172d49b9387aa_coinminer_cryptolocker_elex
- Size 71KB
- Sample260809-kzb6aaxyc1
- SHA256 351f68e405b8d700b3d1972f6e78d9ff7a973eee20a038787c373b470b5d8b20
- MD5 ddf0dfa853586b96253172d49b9387aa
- SHA1 9d7c673fd450c962669b1d88b3651066f956782c
- SHA512 f9141837cb686c58159ed91f2f7cf88269ca06bab8185a5d8154ac3f197bbc7aa5c5a4f60b50158ea05ed6e5600abe87dd5a11bdcdc70d7e6ba81337c96bd96b
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8j:76a+CdOOtEvwDpjQ9Q
- TLSH T139734F396FD51A72E3B7CAB585F681C3B936B8223822990D50CE17414C33F56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-09_ddf0dfa853586b96253172d49b9387aa_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_ddf0dfa853586b96253172d49b9387aa_coinminer_cryptolocker_elex
- Size 71KB
- SHA256 351f68e405b8d700b3d1972f6e78d9ff7a973eee20a038787c373b470b5d8b20
- MD5 ddf0dfa853586b96253172d49b9387aa
- SHA1 9d7c673fd450c962669b1d88b3651066f956782c
- SHA512 f9141837cb686c58159ed91f2f7cf88269ca06bab8185a5d8154ac3f197bbc7aa5c5a4f60b50158ea05ed6e5600abe87dd5a11bdcdc70d7e6ba81337c96bd96b
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8j:76a+CdOOtEvwDpjQ9Q
- TLSH T139734F396FD51A72E3B7CAB585F681C3B936B8223822990D50CE17414C33F56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE