General
- Target 2026-08-10_8d12c8c5cc252f68002192b29e6819b5_coinminer_cryptolocker_elex
- Size 52KB
- Sample260810-h8ydrsdk9v
- SHA256 817d7d594553600dd039a9e5a7cb5ac201254038ffc9cb9b85da113eefa91d4b
- MD5 8d12c8c5cc252f68002192b29e6819b5
- SHA1 caaa560195b70e9ef89438c3e36a1ed16dd8cd59
- SHA512 e9f7e8fd41e1e58e2ac5ade6280e5786a4d14e7a021f7ff2f1eb69cd425d4c45a417b9525938501bcf7e8a5067a4d38a290ffff3cff9a2ecb19a876094459dfb
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgaz+c:bODOw9acifH+YgaCc
- TLSH T1603395387FE56972E37BEB7185F791C2A874B4227D15890E94CE57480833F62EC61A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_8d12c8c5cc252f68002192b29e6819b5_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_8d12c8c5cc252f68002192b29e6819b5_coinminer_cryptolocker_elex
- Size 52KB
- SHA256 817d7d594553600dd039a9e5a7cb5ac201254038ffc9cb9b85da113eefa91d4b
- MD5 8d12c8c5cc252f68002192b29e6819b5
- SHA1 caaa560195b70e9ef89438c3e36a1ed16dd8cd59
- SHA512 e9f7e8fd41e1e58e2ac5ade6280e5786a4d14e7a021f7ff2f1eb69cd425d4c45a417b9525938501bcf7e8a5067a4d38a290ffff3cff9a2ecb19a876094459dfb
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgaz+c:bODOw9acifH+YgaCc
- TLSH T1603395387FE56972E37BEB7185F791C2A874B4227D15890E94CE57480833F62EC61A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE