General
- Target 2026-08-16_a7010ae3a463e4b78c1c4590b9554872_coinminer_cryptolocker_elex
- Size 33KB
- Sample260816-vreljssfmd
- SHA256 3c7ae659685ff92fa1b7a3b693af1dd7278ee2f15e6dce91a41af2f632291c3c
- MD5 a7010ae3a463e4b78c1c4590b9554872
- SHA1 e32926a657afaf8434eef485c93e7fcc710f2451
- SHA512 eec5a56eeaf3f8b1ee8ba5b3fc858d37c0c42ad51d9c8e9afb09978516ca63de8f4abef29376ec2f0d521e67a62c0333c8f695cbb3f78cc64ef6c39a8f96ec04
- SSDEEP 768:jOb2gOo0mw18ae8MrQRN7DTtOOtEvwDpj+G/x4aX:jKUog898rfMOtEvwDpjx/OaX
- TLSH T104F24B60A7CD15A5E33B9B71C9BE96B27527BC553C10A94C11CDF3068C33762A8A1E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-16_a7010ae3a463e4b78c1c4590b9554872_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_a7010ae3a463e4b78c1c4590b9554872_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_a7010ae3a463e4b78c1c4590b9554872_coinminer_cryptolocker_elex
- Size 33KB
- SHA256 3c7ae659685ff92fa1b7a3b693af1dd7278ee2f15e6dce91a41af2f632291c3c
- MD5 a7010ae3a463e4b78c1c4590b9554872
- SHA1 e32926a657afaf8434eef485c93e7fcc710f2451
- SHA512 eec5a56eeaf3f8b1ee8ba5b3fc858d37c0c42ad51d9c8e9afb09978516ca63de8f4abef29376ec2f0d521e67a62c0333c8f695cbb3f78cc64ef6c39a8f96ec04
- SSDEEP 768:jOb2gOo0mw18ae8MrQRN7DTtOOtEvwDpj+G/x4aX:jKUog898rfMOtEvwDpjx/OaX
- TLSH T104F24B60A7CD15A5E33B9B71C9BE96B27527BC553C10A94C11CDF3068C33762A8A1E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE