General
- Target 2026-08-17_7bab0fbaaf76ebd6617c3df90f42673c_coinminer_cryptolocker_elex
- Size 23KB
- Sample260817-s35wrscc53
- SHA256 0e9f0c5948e2982f5744168f007123267c666e10bce0b2673f76d7b9d22fd5c7
- MD5 7bab0fbaaf76ebd6617c3df90f42673c
- SHA1 3d9f5ab3bd8b8e1ec12e0de93ec6c87f31910569
- SHA512 bd58b2c92004d6b59668cda370c92002cfd6094842fca930fd1a9c3c3232de901fb8bb8b5a689f10513ab0b5a99e4f426b834eca83ab5dcced97371c0b801163
- SSDEEP 384:KLPwFRuFn65arz1ZhdaXFXSCVYTLfjDpUX:KLPwFRo6CpwXFXSqYXfjO
- TLSH T18FB26C3072D5A961E3BB8B7165FBC065507DBCA07E268D0D3C8EF39C4AB3B91894164E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-17_7bab0fbaaf76ebd6617c3df90f42673c_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-17_7bab0fbaaf76ebd6617c3df90f42673c_coinminer_cryptolocker_elex
- Size 23KB
- SHA256 0e9f0c5948e2982f5744168f007123267c666e10bce0b2673f76d7b9d22fd5c7
- MD5 7bab0fbaaf76ebd6617c3df90f42673c
- SHA1 3d9f5ab3bd8b8e1ec12e0de93ec6c87f31910569
- SHA512 bd58b2c92004d6b59668cda370c92002cfd6094842fca930fd1a9c3c3232de901fb8bb8b5a689f10513ab0b5a99e4f426b834eca83ab5dcced97371c0b801163
- SSDEEP 384:KLPwFRuFn65arz1ZhdaXFXSCVYTLfjDpUX:KLPwFRo6CpwXFXSqYXfjO
- TLSH T18FB26C3072D5A961E3BB8B7165FBC065507DBCA07E268D0D3C8EF39C4AB3B91894164E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE