General
- Target 2026-08-16_7d4fb220b5df78eb923a66bd53246d32_coinminer_cryptolocker_elex
- Size 91KB
- Sample260816-zseedsxthy
- SHA256 827dc7da251be88084042a95b3e287d8cedbafa8555bd795b0a6a01b8db58578
- MD5 7d4fb220b5df78eb923a66bd53246d32
- SHA1 947f27c0a1eb34402f06f943bf769ec5978aa626
- SHA512 a8d6c8518b454d01d165c1783e489201b4f5ae9ac18c6ff2193db7d7bc513136bd49d2be032c75634d1ede82a7de1b62b749eff8d24fcf96c7fbfdb151eadf89
- SSDEEP 1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5CYQ:1nK6a+qdOOtEvwDpjIQ
- TLSH T1FC9362396BD51972E3BBDEB58AF691C3B935B8223D12990D408E53440833B56EDB1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-08-16_7d4fb220b5df78eb923a66bd53246d32_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_7d4fb220b5df78eb923a66bd53246d32_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_7d4fb220b5df78eb923a66bd53246d32_coinminer_cryptolocker_elex
- Size 91KB
- SHA256 827dc7da251be88084042a95b3e287d8cedbafa8555bd795b0a6a01b8db58578
- MD5 7d4fb220b5df78eb923a66bd53246d32
- SHA1 947f27c0a1eb34402f06f943bf769ec5978aa626
- SHA512 a8d6c8518b454d01d165c1783e489201b4f5ae9ac18c6ff2193db7d7bc513136bd49d2be032c75634d1ede82a7de1b62b749eff8d24fcf96c7fbfdb151eadf89
- SSDEEP 1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5CYQ:1nK6a+qdOOtEvwDpjIQ
- TLSH T1FC9362396BD51972E3BBDEB58AF691C3B935B8223D12990D408E53440833B56EDB1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE