General
- Target 2026-08-10_bdaee15d3eed0e7baf4808b58b35b869_coinminer_cryptolocker_elex_mafia_stealc_tofsee
- Size 768KB
- Sample260810-ln8ksaep9t
- SHA256 ab871298b5956a2c69726c24ea2b235765990b077d17c02e40ec3ea475f34d39
- MD5 bdaee15d3eed0e7baf4808b58b35b869
- SHA1 f4a054755ab246488d40d817c4b27cd215dca36a
- SHA512 2009f1a248c5fa6a5b5f8bf3f88236c34fd442a5f8549f460c97b30a7a350bdbd6bb8a4dc3525e4128f5b4a3919a25417f81a77209096cdcf12f79bc26b34aeb
- SSDEEP 12288:KqXUHkUXe39sOkx2LIan5FAQjU/LikGU5rCOTeidT:KjHPOSOkx2LFscU6UQOJdT
- TLSH T13DF47D31E241C036D6A74572C6FA4BBBA5247D25431161CBA7C4BA262FB76D2FA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-10_bdaee15d3eed0e7baf4808b58b35b869_coinminer_cryptolocker_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_bdaee15d3eed0e7baf4808b58b35b869_coinminer_cryptolocker_elex_mafia_stealc_tofsee
- Size 768KB
- SHA256 ab871298b5956a2c69726c24ea2b235765990b077d17c02e40ec3ea475f34d39
- MD5 bdaee15d3eed0e7baf4808b58b35b869
- SHA1 f4a054755ab246488d40d817c4b27cd215dca36a
- SHA512 2009f1a248c5fa6a5b5f8bf3f88236c34fd442a5f8549f460c97b30a7a350bdbd6bb8a4dc3525e4128f5b4a3919a25417f81a77209096cdcf12f79bc26b34aeb
- SSDEEP 12288:KqXUHkUXe39sOkx2LIan5FAQjU/LikGU5rCOTeidT:KjHPOSOkx2LFscU6UQOJdT
- TLSH T13DF47D31E241C036D6A74572C6FA4BBBA5247D25431161CBA7C4BA262FB76D2FA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory