General
- Target 2026-08-13_84f468ab6a6c4a18a69f94ca72946459_coinminer_cryptolocker_elex
- Size 33KB
- Sample260813-pyx4kshm4v
- SHA256 a5c42ab97547f76b87f3229edfcf03fc1df95d8e42d32383e3c2c441fabdddf0
- MD5 84f468ab6a6c4a18a69f94ca72946459
- SHA1 4ab82e4d389cecafd76f275d8ec497d283fdbc98
- SHA512 97ec720b3bd9dd812c402162b1ff13402ac28c5acaa0075b3556605d4d208a78ca6e1eb4cce2ea4f0cdd1653f8ee6162c5065bc9ef9094a54b8b1fea91b852b5
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axMgl:qUmnpomddpMOtEvwDpjjaYa3
- TLSH T174E2A7759FC51AB2E373E6B689F7C6C2B527FC727822990C50CE37054833612A892D1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-13_84f468ab6a6c4a18a69f94ca72946459_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_84f468ab6a6c4a18a69f94ca72946459_coinminer_cryptolocker_elex
- Size 33KB
- SHA256 a5c42ab97547f76b87f3229edfcf03fc1df95d8e42d32383e3c2c441fabdddf0
- MD5 84f468ab6a6c4a18a69f94ca72946459
- SHA1 4ab82e4d389cecafd76f275d8ec497d283fdbc98
- SHA512 97ec720b3bd9dd812c402162b1ff13402ac28c5acaa0075b3556605d4d208a78ca6e1eb4cce2ea4f0cdd1653f8ee6162c5065bc9ef9094a54b8b1fea91b852b5
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5axMgl:qUmnpomddpMOtEvwDpjjaYa3
- TLSH T174E2A7759FC51AB2E373E6B689F7C6C2B527FC727822990C50CE37054833612A892D1E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE