General
- Target 2026-09-07_aaefd7ace9718ba4adf708ce4c1da8a8_coinminer_cryptolocker_elex
- Size 66KB
- Sample260908-kgwf7svxes
- SHA256 fdf3f91a8d51e12bb0f4257c08f8023d23348fe93f8f455a3a81130c600dc635
- MD5 aaefd7ace9718ba4adf708ce4c1da8a8
- SHA1 9ff8f54abaa3b48549758d4c0a62598e6b2d1bd6
- SHA512 f041fb3202ffe75cf3095cecea81326fed02b1cac2c0838144abe71ce80aa4ad479cb917d399bcdd05ca6825b9363e11215d39c091487bc18555dd9aed18d72c
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwEbNC:qun/VbxjgQNQXtckstOOtEvwDpjfub
- TLSH T1626309756BD815B2E377AB7599F7C6823527BC623D21990C20CA73058C33753A8A2E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-07_aaefd7ace9718ba4adf708ce4c1da8a8_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_aaefd7ace9718ba4adf708ce4c1da8a8_coinminer_cryptolocker_elex
- Size 66KB
- SHA256 fdf3f91a8d51e12bb0f4257c08f8023d23348fe93f8f455a3a81130c600dc635
- MD5 aaefd7ace9718ba4adf708ce4c1da8a8
- SHA1 9ff8f54abaa3b48549758d4c0a62598e6b2d1bd6
- SHA512 f041fb3202ffe75cf3095cecea81326fed02b1cac2c0838144abe71ce80aa4ad479cb917d399bcdd05ca6825b9363e11215d39c091487bc18555dd9aed18d72c
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwEbNC:qun/VbxjgQNQXtckstOOtEvwDpjfub
- TLSH T1626309756BD815B2E377AB7599F7C6823527BC623D21990C20CA73058C33753A8A2E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE