General
- Target 2026-08-19_6995c99c258b3b66e6f3c408035b065c_coinminer_cryptolocker_elex
- Size 48KB
- Sample260820-ala1yswhlf
- SHA256 4e08542de30713d2a87a41c91340f25fc86a0242a89881798b0ff919fa14ab9e
- MD5 6995c99c258b3b66e6f3c408035b065c
- SHA1 4b7a8a25db495883fa2c492588f166fcb91762bc
- SHA512 b12f49e788658418a321ff0e2bd29f1d8283dcf2da59d2e425f8b29378d4912927a2c4b081f78df871b7dea9604a95776197583abca1db08b44ace900fd02c5a
- SSDEEP 768:bO74zYcgT/EkdCQgpwXFXSqQXfj0xKsmHBdzv:bO6YcA/Xk3wXFXSqAJZ
- TLSH T1D22309353FE62971D37B9E7186F79182B93978223D15880E54CF67848D33BA2DC50A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_6995c99c258b3b66e6f3c408035b065c_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_6995c99c258b3b66e6f3c408035b065c_coinminer_cryptolocker_elex
- Size 48KB
- SHA256 4e08542de30713d2a87a41c91340f25fc86a0242a89881798b0ff919fa14ab9e
- MD5 6995c99c258b3b66e6f3c408035b065c
- SHA1 4b7a8a25db495883fa2c492588f166fcb91762bc
- SHA512 b12f49e788658418a321ff0e2bd29f1d8283dcf2da59d2e425f8b29378d4912927a2c4b081f78df871b7dea9604a95776197583abca1db08b44ace900fd02c5a
- SSDEEP 768:bO74zYcgT/EkdCQgpwXFXSqQXfj0xKsmHBdzv:bO6YcA/Xk3wXFXSqAJZ
- TLSH T1D22309353FE62971D37B9E7186F79182B93978223D15880E54CF67848D33BA2DC50A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE