General
- Target 2026-08-22_9ef7d1dbed35cf766165843aef9c6af6_coinminer_cryptolocker_elex
- Size 33KB
- Sample260823-edmf8sdr5s
- SHA256 2582fb385b10bc55b3d161d704f22e05f1f77def769e2481adb94fbac0f4e2b5
- MD5 9ef7d1dbed35cf766165843aef9c6af6
- SHA1 279587c4a743a5bc525616b29818b349ab5202c0
- SHA512 928c131aa753efd1138681bc38addb3e2063c6ce46eb3648a08745ae1afd2d62d774f8aabdff2c5b207dbf9fb7ebd5ce357140a4b78430933e08f0205d904bee
- SSDEEP 768:jOb2gOo0mw18ae8MrQRN7DTtOOtEvwDpj+G/x4as:jKUog898rfMOtEvwDpjx/Oas
- TLSH T1E9F23A60A7CD15A5E33B9B71C9BE96B27527BC553C10A94C11CDF3068C33762A8A1E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-22_9ef7d1dbed35cf766165843aef9c6af6_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_9ef7d1dbed35cf766165843aef9c6af6_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_9ef7d1dbed35cf766165843aef9c6af6_coinminer_cryptolocker_elex
- Size 33KB
- SHA256 2582fb385b10bc55b3d161d704f22e05f1f77def769e2481adb94fbac0f4e2b5
- MD5 9ef7d1dbed35cf766165843aef9c6af6
- SHA1 279587c4a743a5bc525616b29818b349ab5202c0
- SHA512 928c131aa753efd1138681bc38addb3e2063c6ce46eb3648a08745ae1afd2d62d774f8aabdff2c5b207dbf9fb7ebd5ce357140a4b78430933e08f0205d904bee
- SSDEEP 768:jOb2gOo0mw18ae8MrQRN7DTtOOtEvwDpj+G/x4as:jKUog898rfMOtEvwDpjx/Oas
- TLSH T1E9F23A60A7CD15A5E33B9B71C9BE96B27527BC553C10A94C11CDF3068C33762A8A1E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE