General
- Target 2026-08-12_da5fefca8e9aa3694469d16dd2b5785b_coinminer_cryptolocker_elex
- Size 26KB
- Sample260812-gseq2sw1cy
- SHA256 7289017e861601d2a4240580e08e3d2b96acac800b035a3b496615fa831d7ecd
- MD5 da5fefca8e9aa3694469d16dd2b5785b
- SHA1 aa70cbd66d43a36e1e4becde314ee090cbbdeff7
- SHA512 d2053ddb3b69e8702c690b5a1530f6ca016e8d66860dcd18e890348c91234256020958ceaff02f4df2f6a10301289f578bc6eae2690faa7d1bf23c0d42d44ebc
- SSDEEP 192:gf85bTA1Wm4wtaTJlRGt+1sKYdK8LKUc+BxJ6wfHsoh5O9iuOjAwNpV4c4/m2fcZ:gf85/A1U5rRGTxKaFfhU8J/zz47FrzI
- TLSH T184C2E730BBF99D61E377853405F7F690643ABD523D0A961E669AF38C0933B50E8A0E1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-12_da5fefca8e9aa3694469d16dd2b5785b_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_da5fefca8e9aa3694469d16dd2b5785b_coinminer_cryptolocker_elex
- Size 26KB
- SHA256 7289017e861601d2a4240580e08e3d2b96acac800b035a3b496615fa831d7ecd
- MD5 da5fefca8e9aa3694469d16dd2b5785b
- SHA1 aa70cbd66d43a36e1e4becde314ee090cbbdeff7
- SHA512 d2053ddb3b69e8702c690b5a1530f6ca016e8d66860dcd18e890348c91234256020958ceaff02f4df2f6a10301289f578bc6eae2690faa7d1bf23c0d42d44ebc
- SSDEEP 192:gf85bTA1Wm4wtaTJlRGt+1sKYdK8LKUc+BxJ6wfHsoh5O9iuOjAwNpV4c4/m2fcZ:gf85/A1U5rRGTxKaFfhU8J/zz47FrzI
- TLSH T184C2E730BBF99D61E377853405F7F690643ABD523D0A961E669AF38C0933B50E8A0E1D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE