General
- Target 2026-08-11_dc0e33260555a3afbd2640d10ade8fc7_amadey_coinminer_cryptolocker_elex_smoke-loader_stealc_stop_tofsee
- Size 1022KB
- Sample260811-jl1faayfnc
- SHA256 7962e17ad2f9920ed84ebe034b14a948e6dd648605f4c7240763ca2784764638
- MD5 dc0e33260555a3afbd2640d10ade8fc7
- SHA1 7199607a070309b044cb023e72d2a747c01dbfc3
- SHA512 1a69a14d47732d57214c2934116edf890a6d4a2559e16b07373362c8744a1d5a5157f8d2e58f63e2c1f71c589b90f8a0ed665abd554b84d31be3795957ffab91
- SSDEEP 12288:3SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidT:CvO2xJKRw2kOkx2LFRvcU6UQOJdT
- TLSH T137256B31A681C036D5B34571C6FA4BBBA9747D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-11_dc0e33260555a3afbd2640d10ade8fc7_amadey_coinminer_cryptolocker_elex_smoke-loader_stealc_stop_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_dc0e33260555a3afbd2640d10ade8fc7_amadey_coinminer_cryptolocker_elex_smoke-loader_stealc_stop_tofsee
- Size 1022KB
- SHA256 7962e17ad2f9920ed84ebe034b14a948e6dd648605f4c7240763ca2784764638
- MD5 dc0e33260555a3afbd2640d10ade8fc7
- SHA1 7199607a070309b044cb023e72d2a747c01dbfc3
- SHA512 1a69a14d47732d57214c2934116edf890a6d4a2559e16b07373362c8744a1d5a5157f8d2e58f63e2c1f71c589b90f8a0ed665abd554b84d31be3795957ffab91
- SSDEEP 12288:3SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidT:CvO2xJKRw2kOkx2LFRvcU6UQOJdT
- TLSH T137256B31A681C036D5B34571C6FA4BBBA9747D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory