General
- Target 2026-08-20_a21c9441d401b4c28168a0585df69f87_coinminer_cryptolocker_elex
- Size 44KB
- Sample260820-yyc8vaaj8s
- SHA256 3e523b57b7538e3f543debaf9fd5eae6b08296eb561883a842fc5220b4f27535
- MD5 a21c9441d401b4c28168a0585df69f87
- SHA1 d5fe368b9c8372b1876513990d0b540f2cb9d0d3
- SHA512 72af3483b36adad628b4353083e12dfe06c1360758adc816aaa3fcda043c7b26f64542e641767d7b2f9d244a9783eb315abaeaec80892d413f1263310657012c
- SSDEEP 768:bO74zYcgT/EkdCQgpwXFXSqQXfj0xKsmHBdzz:bO6YcA/Xk3wXFXSqAJl
- TLSH T1D9232A357BE76D71D37B9EB046F79082B83A78213E25484E58CF63888D73BA29C4154E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-20_a21c9441d401b4c28168a0585df69f87_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_a21c9441d401b4c28168a0585df69f87_coinminer_cryptolocker_elex
- Size 44KB
- SHA256 3e523b57b7538e3f543debaf9fd5eae6b08296eb561883a842fc5220b4f27535
- MD5 a21c9441d401b4c28168a0585df69f87
- SHA1 d5fe368b9c8372b1876513990d0b540f2cb9d0d3
- SHA512 72af3483b36adad628b4353083e12dfe06c1360758adc816aaa3fcda043c7b26f64542e641767d7b2f9d244a9783eb315abaeaec80892d413f1263310657012c
- SSDEEP 768:bO74zYcgT/EkdCQgpwXFXSqQXfj0xKsmHBdzz:bO6YcA/Xk3wXFXSqAJl
- TLSH T1D9232A357BE76D71D37B9EB046F79082B83A78213E25484E58CF63888D73BA29C4154E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE