General
- Target 2026-08-20_5bbe38b1068e75ca1fe47bb18071d8f7_coinminer_cryptolocker_elex
- Size 48KB
- Sample260820-l37a9svalc
- SHA256 f11398f532f4856b082a48d46ffed72783ffc3bb03b9d168610a5a4c4f680e0a
- MD5 5bbe38b1068e75ca1fe47bb18071d8f7
- SHA1 eb6db9ed0e2ebfcb8c3c314e26d142221609c7ff
- SHA512 60cc7595bf556d3875272dfe7e61067a435b9169b3f97c900c6c404ed2e63f6cf5ea8538b26a8c9702d60601c0cb81f8647d1b18f163b7df83d0d0e9afd3fb9b
- SSDEEP 768:bO74zYcgT/EkdCQgpwXFXSqQXfj0xKsmHBdzh:bO6YcA/Xk3wXFXSqAJX
- TLSH T1692309357FE66971D37B9E7486F79082B93978223D16880D54CF63848D33B62DC51A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_5bbe38b1068e75ca1fe47bb18071d8f7_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_5bbe38b1068e75ca1fe47bb18071d8f7_coinminer_cryptolocker_elex
- Size 48KB
- SHA256 f11398f532f4856b082a48d46ffed72783ffc3bb03b9d168610a5a4c4f680e0a
- MD5 5bbe38b1068e75ca1fe47bb18071d8f7
- SHA1 eb6db9ed0e2ebfcb8c3c314e26d142221609c7ff
- SHA512 60cc7595bf556d3875272dfe7e61067a435b9169b3f97c900c6c404ed2e63f6cf5ea8538b26a8c9702d60601c0cb81f8647d1b18f163b7df83d0d0e9afd3fb9b
- SSDEEP 768:bO74zYcgT/EkdCQgpwXFXSqQXfj0xKsmHBdzh:bO6YcA/Xk3wXFXSqAJX
- TLSH T1692309357FE66971D37B9E7486F79082B93978223D16880D54CF63848D33B62DC51A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE