General
- Target 2026-08-16_bab1bb6931995be8fe21a8f50016d44c_coinminer_cryptolocker_elex
- Size 26KB
- Sample260816-vjrk5seq4y
- SHA256 d93c1f0960a27d0b57e71d5130bcb8b53b716a0e2bd5e35af2883e02a169bea8
- MD5 bab1bb6931995be8fe21a8f50016d44c
- SHA1 9248579aa40f09d921a0ab253fdb0e261f0fda8d
- SHA512 820b2c59e31c16b67ced291a81e2e73aab3d8f8773fe04f288e6b68f48fae1b1bcd31f7f954a13fcac73e91372d6987cb9370552aa543a873bd2aa7ddb0701ce
- SSDEEP 192:gf85bTA1Wm4wtaTJlRGt+1sKYdK8LKUc+BxJ6wfHsoh5O9iuOjAwNpV4c4/m2fct:gf85/A1U5rRGTxKaFfhU8J/zz47FrA
- TLSH T1A3C2E630BBF89D61E377853405F6F690687A7D513D0A961E665AF38C0933B50E8A0F1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-16_bab1bb6931995be8fe21a8f50016d44c_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_bab1bb6931995be8fe21a8f50016d44c_coinminer_cryptolocker_elex
- Size 26KB
- SHA256 d93c1f0960a27d0b57e71d5130bcb8b53b716a0e2bd5e35af2883e02a169bea8
- MD5 bab1bb6931995be8fe21a8f50016d44c
- SHA1 9248579aa40f09d921a0ab253fdb0e261f0fda8d
- SHA512 820b2c59e31c16b67ced291a81e2e73aab3d8f8773fe04f288e6b68f48fae1b1bcd31f7f954a13fcac73e91372d6987cb9370552aa543a873bd2aa7ddb0701ce
- SSDEEP 192:gf85bTA1Wm4wtaTJlRGt+1sKYdK8LKUc+BxJ6wfHsoh5O9iuOjAwNpV4c4/m2fct:gf85/A1U5rRGTxKaFfhU8J/zz47FrA
- TLSH T1A3C2E630BBF89D61E377853405F6F690687A7D513D0A961E665AF38C0933B50E8A0F1E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE