General
- Target 2026-08-20_ceb962fe2603f01c95754303af507c72_coinminer_cryptolocker_elex
- Size 47KB
- Sample260820-rt6w2astgz
- SHA256 0d9701aaf043093459740001398cd81cb8cda1eff32b447be421e780d5366c37
- MD5 ceb962fe2603f01c95754303af507c72
- SHA1 493bea740dcc674ec418863234b5b1ebcb0c9a3a
- SHA512 da82b0e8d4f6990ebbaf110969e5436acdfbd57e415be2febb83f258f551e184014e35ac02dbaec2622f90f6bf64fcfa5b54d091a6a8116645d8768b29b683f9
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqY:bODOw9acifH+YY
- TLSH T16F23FA397EE55872E277AA7185F79183B874B4223E25490E98CF63890932F53EC6160E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_ceb962fe2603f01c95754303af507c72_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_ceb962fe2603f01c95754303af507c72_coinminer_cryptolocker_elex
- Size 47KB
- SHA256 0d9701aaf043093459740001398cd81cb8cda1eff32b447be421e780d5366c37
- MD5 ceb962fe2603f01c95754303af507c72
- SHA1 493bea740dcc674ec418863234b5b1ebcb0c9a3a
- SHA512 da82b0e8d4f6990ebbaf110969e5436acdfbd57e415be2febb83f258f551e184014e35ac02dbaec2622f90f6bf64fcfa5b54d091a6a8116645d8768b29b683f9
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqY:bODOw9acifH+YY
- TLSH T16F23FA397EE55872E277AA7185F79183B874B4223E25490E98CF63890932F53EC6160E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE