General
- Target 2026-08-20_f6cd4b3618672c96aa15c048ac71bcee_coinminer_cryptolocker_elex
- Size 28KB
- Sample260820-bc8rascn8x
- SHA256 5120d9a173ebc7c60b9c40575cb3840901942799d6792180284b79204392c82f
- MD5 f6cd4b3618672c96aa15c048ac71bcee
- SHA1 a29290ae3f46421f64c8e64806e1a333dc23526c
- SHA512 417e32d36a1066cb99407b7a9a036ff1074ce1997a692d04989aa73bbb4a6b7368d50e106c19e1d835195b383ddd4d4a95c89eef2d4fd03f0910e4776a38e7bf
- SSDEEP 384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6HMmHBda2V1:bVCPwFRo6CpwXFXSqQXfjAsmHBdzn
- TLSH T1B6D208347AE96572E377CB7192F680C6B579B8623D12880D688FB3880D73F52DD9160E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_f6cd4b3618672c96aa15c048ac71bcee_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_f6cd4b3618672c96aa15c048ac71bcee_coinminer_cryptolocker_elex
- Size 28KB
- SHA256 5120d9a173ebc7c60b9c40575cb3840901942799d6792180284b79204392c82f
- MD5 f6cd4b3618672c96aa15c048ac71bcee
- SHA1 a29290ae3f46421f64c8e64806e1a333dc23526c
- SHA512 417e32d36a1066cb99407b7a9a036ff1074ce1997a692d04989aa73bbb4a6b7368d50e106c19e1d835195b383ddd4d4a95c89eef2d4fd03f0910e4776a38e7bf
- SSDEEP 384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6HMmHBda2V1:bVCPwFRo6CpwXFXSqQXfjAsmHBdzn
- TLSH T1B6D208347AE96572E377CB7192F680C6B579B8623D12880D688FB3880D73F52DD9160E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE