General
- Target 2026-08-25_cb09afdff054af1ec64bc70483b6deee_coinminer_cryptolocker_elex_mafia_stealc_tofsee
- Size 1.4MB
- Sample260826-lazeysbl8t
- SHA256 93b69fb387f44215d27048b414eae3cc6bd642cc9951565223d3cebfab141ffd
- MD5 cb09afdff054af1ec64bc70483b6deee
- SHA1 c1b63eb2290de5fb521d00e1c61767bcbd08b81d
- SHA512 4b5979918091b4bc849e1979260a40b2a7d0a96f59a0fbd66ee7b447d4a5aff621c84e7a726d60560c0d4b3a8fc766ed57521e8cfec45d8b0108663c85d28e0d
- SSDEEP 24576:cjHPOSOkx2LFscU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:cTGkQy56/OJdJCXDrsOFZMjHfUr
- TLSH T1F0658E31AAC14132E2B3867186FA56F6A5257C222711E5CF62C97B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-25_cb09afdff054af1ec64bc70483b6deee_coinminer_cryptolocker_elex_mafia_stealc_tofsee.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-25_cb09afdff054af1ec64bc70483b6deee_coinminer_cryptolocker_elex_mafia_stealc_tofsee
- Size 1.4MB
- SHA256 93b69fb387f44215d27048b414eae3cc6bd642cc9951565223d3cebfab141ffd
- MD5 cb09afdff054af1ec64bc70483b6deee
- SHA1 c1b63eb2290de5fb521d00e1c61767bcbd08b81d
- SHA512 4b5979918091b4bc849e1979260a40b2a7d0a96f59a0fbd66ee7b447d4a5aff621c84e7a726d60560c0d4b3a8fc766ed57521e8cfec45d8b0108663c85d28e0d
- SSDEEP 24576:cjHPOSOkx2LFscU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:cTGkQy56/OJdJCXDrsOFZMjHfUr
- TLSH T1F0658E31AAC14132E2B3867186FA56F6A5257C222711E5CF62C97B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory