General
- Target 2026-08-16_534265b860fed0a0db0d7138de3636e5_coinminer_cryptolocker_elex
- Size 69KB
- Sample260816-m4vvaswdqa
- SHA256 698ffa71a281e7693e57ae300745d4ce3901a48cc661c59e8604e2adf564c746
- MD5 534265b860fed0a0db0d7138de3636e5
- SHA1 e5347c512c384c73f6a10b19eb5d412a3e48583a
- SHA512 edad204c557be2e2dd1fd09308189f225e209ad068fa16166474d461be1f3feb9e5284dfe04a461f1c447dc2132f36e65bcb195f522555e5de804dbe96071077
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8OE:76a+CdOOtEvwDpjQ9s
- TLSH T1BE6350396FD51A72E377CAB585F781C3B926B8233922990D50CE17414C33B56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-16_534265b860fed0a0db0d7138de3636e5_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_534265b860fed0a0db0d7138de3636e5_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_534265b860fed0a0db0d7138de3636e5_coinminer_cryptolocker_elex
- Size 69KB
- SHA256 698ffa71a281e7693e57ae300745d4ce3901a48cc661c59e8604e2adf564c746
- MD5 534265b860fed0a0db0d7138de3636e5
- SHA1 e5347c512c384c73f6a10b19eb5d412a3e48583a
- SHA512 edad204c557be2e2dd1fd09308189f225e209ad068fa16166474d461be1f3feb9e5284dfe04a461f1c447dc2132f36e65bcb195f522555e5de804dbe96071077
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8OE:76a+CdOOtEvwDpjQ9s
- TLSH T1BE6350396FD51A72E377CAB585F781C3B926B8233922990D50CE17414C33B56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE