General
- Target 2026-08-20_f085830725cb85a022e065eb10cf8b39_coinminer_cryptolocker_elex
- Size 48KB
- Sample260820-d8pdmsygne
- SHA256 21dce39bdd1b4e13f24db020f343c595015f4ded22f69ee4af43d6ecb0b1e3d5
- MD5 f085830725cb85a022e065eb10cf8b39
- SHA1 a3ecf0d629e224d7fe6d70bb24d5976a2b2f8d98
- SHA512 d86e4088454fcc21661ea57f5dfd683f90d0fa4744638f30b63f0b7461115552616c609fd04ebcc9d51d34ceca58bfc7607230f10c245bb5d03af08d029e6651
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgSqf:bODOw9acifH+YgSS
- TLSH T1D033D8387EE56972E377AA7185F751C2B874B4223D25890E94CF67880933F52EC6160E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_f085830725cb85a022e065eb10cf8b39_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_f085830725cb85a022e065eb10cf8b39_coinminer_cryptolocker_elex
- Size 48KB
- SHA256 21dce39bdd1b4e13f24db020f343c595015f4ded22f69ee4af43d6ecb0b1e3d5
- MD5 f085830725cb85a022e065eb10cf8b39
- SHA1 a3ecf0d629e224d7fe6d70bb24d5976a2b2f8d98
- SHA512 d86e4088454fcc21661ea57f5dfd683f90d0fa4744638f30b63f0b7461115552616c609fd04ebcc9d51d34ceca58bfc7607230f10c245bb5d03af08d029e6651
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgSqf:bODOw9acifH+YgSS
- TLSH T1D033D8387EE56972E377AA7185F751C2B874B4223D25890E94CF67880933F52EC6160E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE