General
- Target 2026-08-20_63b588fedecab1b1f251adfd683cf72b_coinminer_cryptolocker_elex
- Size 46KB
- Sample260820-1psnaazsbt
- SHA256 c56404f40ce1da682db00092860f155f441f2d4efe04e69dbdd3c74f5d354faa
- MD5 63b588fedecab1b1f251adfd683cf72b
- SHA1 fce955cfc487d3470fb86d371b0f5bc1ffd4ac89
- SHA512 c0f23c6a9fa5b3155bca3ca6ff4eb4b60af4f0f30cba82ddae0e541c58d19eec590e58e8b7f961a150bbb0344dd686e7aaee36c13a5a0713e3a121b23bdcb295
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqa8:bODOw9acifH+Yr
- TLSH T17323F939BEE56C72E277AA7194F75183FC74B8223A25490E98CF63890932F53BC5150E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_63b588fedecab1b1f251adfd683cf72b_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_63b588fedecab1b1f251adfd683cf72b_coinminer_cryptolocker_elex
- Size 46KB
- SHA256 c56404f40ce1da682db00092860f155f441f2d4efe04e69dbdd3c74f5d354faa
- MD5 63b588fedecab1b1f251adfd683cf72b
- SHA1 fce955cfc487d3470fb86d371b0f5bc1ffd4ac89
- SHA512 c0f23c6a9fa5b3155bca3ca6ff4eb4b60af4f0f30cba82ddae0e541c58d19eec590e58e8b7f961a150bbb0344dd686e7aaee36c13a5a0713e3a121b23bdcb295
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqa8:bODOw9acifH+Yr
- TLSH T17323F939BEE56C72E277AA7194F75183FC74B8223A25490E98CF63890932F53BC5150E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE