General
- Target 2026-08-20_56a59c7d26f3581858e1c3ff0c5d7079_coinminer_cryptolocker_elex
- Size 48KB
- Sample260820-1r91cazse1
- SHA256 05d4ed3ffa9d9ece6303b78faf2dc4d1954daf1ca811a0a008c92d09b5924e1c
- MD5 56a59c7d26f3581858e1c3ff0c5d7079
- SHA1 4aae925fd2dadbb61eef7adb10bd2c0960d1c1ae
- SHA512 e4b1379710c9623b970791029e634c443d7d0cd4d66dad85a8fa08c88790d5e225f69513c2063a4de9c53de58f87d7870e5453c1daa2565b6477f423968384e3
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgSqC:bODOw9acifH+YgS/
- TLSH T1C533D8387EE56972E377AA7185F751C2B874B4223E25890E94CF67480933F62EC6160E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_56a59c7d26f3581858e1c3ff0c5d7079_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_56a59c7d26f3581858e1c3ff0c5d7079_coinminer_cryptolocker_elex
- Size 48KB
- SHA256 05d4ed3ffa9d9ece6303b78faf2dc4d1954daf1ca811a0a008c92d09b5924e1c
- MD5 56a59c7d26f3581858e1c3ff0c5d7079
- SHA1 4aae925fd2dadbb61eef7adb10bd2c0960d1c1ae
- SHA512 e4b1379710c9623b970791029e634c443d7d0cd4d66dad85a8fa08c88790d5e225f69513c2063a4de9c53de58f87d7870e5453c1daa2565b6477f423968384e3
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgSqC:bODOw9acifH+YgS/
- TLSH T1C533D8387EE56972E377AA7185F751C2B874B4223E25890E94CF67480933F62EC6160E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE