General
- Target 2026-08-10_0ae52a973af9fd107a3024adbcab1d75_coinminer_cryptolocker_elex
- Size 52KB
- Sample260810-ppmlgstwhz
- SHA256 b49de89758a8a88c2a49f4524c264d145470325cd941be9eaa2a2a4185d8b591
- MD5 0ae52a973af9fd107a3024adbcab1d75
- SHA1 0105fa5c2cb9ac90f858e93467a683d78f5757fc
- SHA512 2af72810a9fc044734a7f8796c13ef8f835d3c977b62795b36a78d161720545487a78120d26b42da7fc2fa95a27b3a0d70f286a1f858b5ac621935014731fde4
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgaz+V:bODOw9acifH+YgaCV
- TLSH T12C3395387FE56972E37BEB7185F791C2A874B4227D15890E94CE57480833F62EC61A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_0ae52a973af9fd107a3024adbcab1d75_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_0ae52a973af9fd107a3024adbcab1d75_coinminer_cryptolocker_elex
- Size 52KB
- SHA256 b49de89758a8a88c2a49f4524c264d145470325cd941be9eaa2a2a4185d8b591
- MD5 0ae52a973af9fd107a3024adbcab1d75
- SHA1 0105fa5c2cb9ac90f858e93467a683d78f5757fc
- SHA512 2af72810a9fc044734a7f8796c13ef8f835d3c977b62795b36a78d161720545487a78120d26b42da7fc2fa95a27b3a0d70f286a1f858b5ac621935014731fde4
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgaz+V:bODOw9acifH+YgaCV
- TLSH T12C3395387FE56972E37BEB7185F791C2A874B4227D15890E94CE57480833F62EC61A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE