General
- Target 2026-08-24_6d318f167d86ec7838d081a0a48dcef4_coinminer_cryptolocker_elex
- Size 61KB
- Sample260825-m2nyzaxtfx
- SHA256 a207c8c72eb86cb7d076a2d61698efb180b66b3dec0b694022befd23bd711595
- MD5 6d318f167d86ec7838d081a0a48dcef4
- SHA1 8a79dd0a4f86cf59983dc6b8f70db42287fc863a
- SHA512 808f00b161ffd9152cfb2884d855192b9a5d8cad746659ddfec2cf7d6b3334d374c3db19e2965fe4c787730b8984f585bc81d497ee6c8751e52cab3598f43b44
- SSDEEP 384:bFGFQrdSmuQ8WFqxpj5cpyIuYxVe3FSr+OLfjDpw+Kbntpx:bFGm5zusFUB2preAr+Ofj9KBpx
- TLSH T10E532A38BAD82973D377C73191F690866479BC623E15490DA8CE739C0D73B52ED52A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-24_6d318f167d86ec7838d081a0a48dcef4_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_6d318f167d86ec7838d081a0a48dcef4_coinminer_cryptolocker_elex
- Size 61KB
- SHA256 a207c8c72eb86cb7d076a2d61698efb180b66b3dec0b694022befd23bd711595
- MD5 6d318f167d86ec7838d081a0a48dcef4
- SHA1 8a79dd0a4f86cf59983dc6b8f70db42287fc863a
- SHA512 808f00b161ffd9152cfb2884d855192b9a5d8cad746659ddfec2cf7d6b3334d374c3db19e2965fe4c787730b8984f585bc81d497ee6c8751e52cab3598f43b44
- SSDEEP 384:bFGFQrdSmuQ8WFqxpj5cpyIuYxVe3FSr+OLfjDpw+Kbntpx:bFGm5zusFUB2preAr+Ofj9KBpx
- TLSH T10E532A38BAD82973D377C73191F690866479BC623E15490DA8CE739C0D73B52ED52A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE