General
- Target 2026-08-20_d5ebe4459695e82c014273b0cf9762ec_coinminer_cryptolocker_elex
- Size 48KB
- Sample260820-xe3hystcrh
- SHA256 a54730152d35bd37896625bfb7121e4a5f29b1a1505aac3fc51d7df5f8d92f04
- MD5 d5ebe4459695e82c014273b0cf9762ec
- SHA1 bca2e12e7a4900108e39c0169b3be263cdc763b6
- SHA512 4e3d7089f167142587c78f0214fad5a6803213e2472e3b6da819d6ba7b8af08e2e115b3f3d85ba55ccc61a889e5e987a491346d2d1ca0b390c361e5eff790e57
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgd:bODOw9acifH+Ygd
- TLSH T19C23D8397EE56972E377EA7185F751C3A834B4223E25890E94CF67480933F62EC6160E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_d5ebe4459695e82c014273b0cf9762ec_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_d5ebe4459695e82c014273b0cf9762ec_coinminer_cryptolocker_elex
- Size 48KB
- SHA256 a54730152d35bd37896625bfb7121e4a5f29b1a1505aac3fc51d7df5f8d92f04
- MD5 d5ebe4459695e82c014273b0cf9762ec
- SHA1 bca2e12e7a4900108e39c0169b3be263cdc763b6
- SHA512 4e3d7089f167142587c78f0214fad5a6803213e2472e3b6da819d6ba7b8af08e2e115b3f3d85ba55ccc61a889e5e987a491346d2d1ca0b390c361e5eff790e57
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgd:bODOw9acifH+Ygd
- TLSH T19C23D8397EE56972E377EA7185F751C3A834B4223E25890E94CF67480933F62EC6160E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Custom signature
Detection of CryptoLocker Variants
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE