General
- Target 2026-08-20_61f22b7f20fd818cc7588c74e38dac97_coinminer_cryptolocker_elex
- Size 49KB
- Sample260820-svzpsaep4v
- SHA256 5566d7657159e712c992ccd4078563c6d9a289c6fe4b83e924fdb214f337ea3c
- MD5 61f22b7f20fd818cc7588c74e38dac97
- SHA1 fbafff07322cdd43b85ca9f6ee7d42d13c0c72f1
- SHA512 c2b6c6cb2849308e73552d00ea3297a2c838a18b7d523883fbf8ed5652a30052ab8a4ae901fab7856bd534c8ee89a4fbd24319aaae14dce6e41af069b4cb8b6e
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgSqi:bODOw9acifH+YgSf
- TLSH T13233D8387EE56972E377AA7185F751C3B874B4223E15890E94CF67880933F62EC6160E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_61f22b7f20fd818cc7588c74e38dac97_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_61f22b7f20fd818cc7588c74e38dac97_coinminer_cryptolocker_elex
- Size 49KB
- SHA256 5566d7657159e712c992ccd4078563c6d9a289c6fe4b83e924fdb214f337ea3c
- MD5 61f22b7f20fd818cc7588c74e38dac97
- SHA1 fbafff07322cdd43b85ca9f6ee7d42d13c0c72f1
- SHA512 c2b6c6cb2849308e73552d00ea3297a2c838a18b7d523883fbf8ed5652a30052ab8a4ae901fab7856bd534c8ee89a4fbd24319aaae14dce6e41af069b4cb8b6e
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgSqi:bODOw9acifH+YgSf
- TLSH T13233D8387EE56972E377AA7185F751C3B874B4223E15890E94CF67880933F62EC6160E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE