General
- Target 2026-08-19_610f03d4aaf733a81be7e72e0a0ec2e7_coinminer_cryptolocker_elex
- Size 49KB
- Sample260820-ame2asy1bs
- SHA256 8f0deabd3cb83e8b1eb18ae5f1052c4e19d723da8a352777c2e8cabcf4b063b6
- MD5 610f03d4aaf733a81be7e72e0a0ec2e7
- SHA1 5444f1a1d3c54a15da27410782fe83bdc08f36b3
- SHA512 91469e72157033807dca97c66f6cc38ee1334e6da44e41e66c0aaacaf8a2e51566c0a7a4cdd0f3699d862fa5c73fe7660896b8e327007e95ba59c17fd3f00c27
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgSqcZ:bODOw9acifH+YgSHZ
- TLSH T1B733D8387EE55972E377AA7185F751C2B874B4223E25890E98CF67840933F62EC6160E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-19_610f03d4aaf733a81be7e72e0a0ec2e7_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_610f03d4aaf733a81be7e72e0a0ec2e7_coinminer_cryptolocker_elex
- Size 49KB
- SHA256 8f0deabd3cb83e8b1eb18ae5f1052c4e19d723da8a352777c2e8cabcf4b063b6
- MD5 610f03d4aaf733a81be7e72e0a0ec2e7
- SHA1 5444f1a1d3c54a15da27410782fe83bdc08f36b3
- SHA512 91469e72157033807dca97c66f6cc38ee1334e6da44e41e66c0aaacaf8a2e51566c0a7a4cdd0f3699d862fa5c73fe7660896b8e327007e95ba59c17fd3f00c27
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgSqcZ:bODOw9acifH+YgSHZ
- TLSH T1B733D8387EE55972E377AA7185F751C2B874B4223E25890E98CF67840933F62EC6160E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE