General
- Target 2026-09-07_d9c06a3bfc573ca59c7aeafa0f2bc46a_coinminer_cryptolocker_elex
- Size 41KB
- Sample260908-e1gjha1gre
- SHA256 d3e1495969f7b142f38973da4a2c502f1bc48a11664f5a6006b70e41c829a73a
- MD5 d9c06a3bfc573ca59c7aeafa0f2bc46a
- SHA1 a026259fc69e51fb5e9a1af27888d7efca8a68c6
- SHA512 d03225c4d51c42f5b6888f8261cc03e8f91886aa680522a41c22a2e5519f308e275cbe507bf1585310ffc69dbb06f10f3e11381a88488f9fa7e4da7ae9b71770
- SSDEEP 384:ba74uGLLQRcsdeQ72ngEr4K7YmE8j6CQYnrz1ZhdaXFXSCVQTLfjDpXqxKHNQY:ba74zYcgT/EkdCQgpwXFXSqQXfj0xKCY
- TLSH T10D136D3637E76C61D27B5FB015FBE042787A7C203E39884E6CCE778DCAB26A19401586
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-07_d9c06a3bfc573ca59c7aeafa0f2bc46a_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_d9c06a3bfc573ca59c7aeafa0f2bc46a_coinminer_cryptolocker_elex
- Size 41KB
- SHA256 d3e1495969f7b142f38973da4a2c502f1bc48a11664f5a6006b70e41c829a73a
- MD5 d9c06a3bfc573ca59c7aeafa0f2bc46a
- SHA1 a026259fc69e51fb5e9a1af27888d7efca8a68c6
- SHA512 d03225c4d51c42f5b6888f8261cc03e8f91886aa680522a41c22a2e5519f308e275cbe507bf1585310ffc69dbb06f10f3e11381a88488f9fa7e4da7ae9b71770
- SSDEEP 384:ba74uGLLQRcsdeQ72ngEr4K7YmE8j6CQYnrz1ZhdaXFXSCVQTLfjDpXqxKHNQY:ba74zYcgT/EkdCQgpwXFXSqQXfj0xKCY
- TLSH T10D136D3637E76C61D27B5FB015FBE042787A7C203E39884E6CCE778DCAB26A19401586
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE