General
- Target 2026-08-20_a16402275b989b2f3042d295cc498f3b_coinminer_cryptolocker_elex
- Size 48KB
- Sample260820-xk3e5stemc
- SHA256 0f90d208a768a6b68d2145ef961f8e942a7568809ce11f0770bf59df638a3372
- MD5 a16402275b989b2f3042d295cc498f3b
- SHA1 7f0542a863d6d25f3b0cb1488e3376cbe8d4ebbe
- SHA512 1566805163f5ca771311ee225716a48d6cd74e1efba3535fb19d713a19524723aac3a9581c1306cb2a15c955d5850f52e4a82877d17a5e3b397a833960e7f319
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgSqR:bODOw9acifH+YgSI
- TLSH T12133D8387EE55972E377EA7185F751C2B874B4223D25890E94CF67880933F52EC6160E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_a16402275b989b2f3042d295cc498f3b_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_a16402275b989b2f3042d295cc498f3b_coinminer_cryptolocker_elex
- Size 48KB
- SHA256 0f90d208a768a6b68d2145ef961f8e942a7568809ce11f0770bf59df638a3372
- MD5 a16402275b989b2f3042d295cc498f3b
- SHA1 7f0542a863d6d25f3b0cb1488e3376cbe8d4ebbe
- SHA512 1566805163f5ca771311ee225716a48d6cd74e1efba3535fb19d713a19524723aac3a9581c1306cb2a15c955d5850f52e4a82877d17a5e3b397a833960e7f319
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0STX73OBqgSqR:bODOw9acifH+YgSI
- TLSH T12133D8387EE55972E377EA7185F751C2B874B4223D25890E94CF67880933F52EC6160E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE