General
- Target 2026-08-12_b275223339658d7c4a3e65386a598976_coinminer_cryptolocker_elex
- Size 83KB
- Sample260812-d2mapshp6x
- SHA256 56ec747230fd47244c93adcce7c66dec4044e8a5bf838a23dec61a6c8bd153e3
- MD5 b275223339658d7c4a3e65386a598976
- SHA1 7c8110f21bbdf5497cb6748d430505053926e32f
- SHA512 8084d57eebb8ce2cad879120eee1f60195218c51225adbc047921d0ec3ee4919a3ecaf81c80f01f01d38c2e05a637c91fcdb8efc69f3211617f15d3330dfa7e4
- SSDEEP 1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDZ:zCsanOtEvwDpjY
- TLSH T1B683B73D5EE81572D3B7DABAD5F695C3B921B82239219C0E50CB13414C23F17EDA2A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_b275223339658d7c4a3e65386a598976_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_b275223339658d7c4a3e65386a598976_coinminer_cryptolocker_elex
- Size 83KB
- SHA256 56ec747230fd47244c93adcce7c66dec4044e8a5bf838a23dec61a6c8bd153e3
- MD5 b275223339658d7c4a3e65386a598976
- SHA1 7c8110f21bbdf5497cb6748d430505053926e32f
- SHA512 8084d57eebb8ce2cad879120eee1f60195218c51225adbc047921d0ec3ee4919a3ecaf81c80f01f01d38c2e05a637c91fcdb8efc69f3211617f15d3330dfa7e4
- SSDEEP 1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDZ:zCsanOtEvwDpjY
- TLSH T1B683B73D5EE81572D3B7DABAD5F695C3B921B82239219C0E50CB13414C23F17EDA2A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE