General
- Target 2026-09-04_04817c13f87ebc569d2074f182cb070c_coinminer_cryptolocker_elex
- Size 50KB
- Sample260905-ya4qws1emd
- SHA256 74bb8135b24db5631f8be024bb2fbafb2fc02c57985948b7406b4fe74eb3b5f5
- MD5 04817c13f87ebc569d2074f182cb070c
- SHA1 02975cb9f3b2bce06e64e7c71fda047e9c3a7d69
- SHA512 d45cbaa488646b79808d4b3d94d0c6cb56eb9384caed9b889e3a57d0789825ed43a8c7b9908b3826f68cb2c99af43d6ca960d89556975271bad7d7bdc4c8bff2
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtOW:bODOw9acifAoc+vR
- TLSH T1EE339538AEE95873E277AAB595F751C3F834B8123A15480E94CF53850933F57BCA160E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-04_04817c13f87ebc569d2074f182cb070c_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_04817c13f87ebc569d2074f182cb070c_coinminer_cryptolocker_elex
- Size 50KB
- SHA256 74bb8135b24db5631f8be024bb2fbafb2fc02c57985948b7406b4fe74eb3b5f5
- MD5 04817c13f87ebc569d2074f182cb070c
- SHA1 02975cb9f3b2bce06e64e7c71fda047e9c3a7d69
- SHA512 d45cbaa488646b79808d4b3d94d0c6cb56eb9384caed9b889e3a57d0789825ed43a8c7b9908b3826f68cb2c99af43d6ca960d89556975271bad7d7bdc4c8bff2
- SSDEEP 768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtOW:bODOw9acifAoc+vR
- TLSH T1EE339538AEE95873E277AAB595F751C3F834B8123A15480E94CF53850933F57BCA160E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE