General
- Target 2026-08-12_f69760a641ec05086e1572a9ed83b4c1_coinminer_cryptolocker_elex
- Size 86KB
- Sample260812-dwj86aac42
- SHA256 6d8522dfe3ce3fdaaaaeac50a6483a0b8ea63612bf3a34c7834d151a66646d0e
- MD5 f69760a641ec05086e1572a9ed83b4c1
- SHA1 ffee836297f2965d2cc9f8f7403727ee5b572fd7
- SHA512 97cc58b40ec43b25a67bbd961f42944e5e60e351581bae6203851f3343fdb6a29c373607fa5886c76287d81d935e90031dedb41344203b8f3e86e2645b6e29d2
- SSDEEP 768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIF:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg2
- TLSH T1B293D935AEC51973E377D6B6C9F785F3B411B8623612994E14CAE7014C33B83ADA290E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-12_f69760a641ec05086e1572a9ed83b4c1_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_f69760a641ec05086e1572a9ed83b4c1_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_f69760a641ec05086e1572a9ed83b4c1_coinminer_cryptolocker_elex
- Size 86KB
- SHA256 6d8522dfe3ce3fdaaaaeac50a6483a0b8ea63612bf3a34c7834d151a66646d0e
- MD5 f69760a641ec05086e1572a9ed83b4c1
- SHA1 ffee836297f2965d2cc9f8f7403727ee5b572fd7
- SHA512 97cc58b40ec43b25a67bbd961f42944e5e60e351581bae6203851f3343fdb6a29c373607fa5886c76287d81d935e90031dedb41344203b8f3e86e2645b6e29d2
- SSDEEP 768:qkmnjFom/kLyMro2GtOOtEvwDpjeY10Y/YMsvlMdwPK80GQuchoIgtIF:qkmnpomddpMOtEvwDpjJGYQbN/PKwMg2
- TLSH T1B293D935AEC51973E377D6B6C9F785F3B411B8623612994E14CAE7014C33B83ADA290E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE