General
- Target 2026-08-17_c7eabf96163a0959a16a3f8c0f457353_coinminer_cryptolocker_elex
- Size 70KB
- Sample260817-b93ljs1ybv
- SHA256 e118c4cf92fe92f621ce0ff056bf8e9633f835eaffb8a6831cd37428f4c7138b
- MD5 c7eabf96163a0959a16a3f8c0f457353
- SHA1 8c86ba4f25ded9c5663406ef32be1ca367cec6b5
- SHA512 6c398b6ab4b7003fc681164a81f97b03400f07a08020c0a58311e4dfabad78bc18dcf9ab685bd0df6108ea4c2964be6ee4c9e556ad2d6582543d1fcbf9c0d064
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8w:76a+CdOOtEvwDpjQ9L
- TLSH T17F6340396FD51A72E377CAB585F782C3B936B8223822990D50CE17414C33B56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-17_c7eabf96163a0959a16a3f8c0f457353_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_c7eabf96163a0959a16a3f8c0f457353_coinminer_cryptolocker_elex
- Size 70KB
- SHA256 e118c4cf92fe92f621ce0ff056bf8e9633f835eaffb8a6831cd37428f4c7138b
- MD5 c7eabf96163a0959a16a3f8c0f457353
- SHA1 8c86ba4f25ded9c5663406ef32be1ca367cec6b5
- SHA512 6c398b6ab4b7003fc681164a81f97b03400f07a08020c0a58311e4dfabad78bc18dcf9ab685bd0df6108ea4c2964be6ee4c9e556ad2d6582543d1fcbf9c0d064
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8w:76a+CdOOtEvwDpjQ9L
- TLSH T17F6340396FD51A72E377CAB585F782C3B936B8223822990D50CE17414C33B56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE