General
- Target 2026-09-08_e70c9deda8a46d17d362090115116287_coinminer_cryptolocker_elex
- Size 63KB
- Sample260910-cgs23scn4v
- SHA256 0891a3d324c4377733cf6ae6f2863d89184e32c753b17a27773a62c18e93fa91
- MD5 e70c9deda8a46d17d362090115116287
- SHA1 791ef4d735aebf0f661257edb784c130d7695675
- SHA512 1b837a182bc0664d42a1b1015ecb4ab524d98a75feec093f522097266560c0549367b0757e695ec2acc2b03b834b6e4badc5b0740d514aeb103d56c8ab3d48e6
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtjQ:qun/VbxjgQNQXtckstOOtEvwDpjfG
- TLSH T191534A62ABC815B2E2376775DCBBCA123117BC663D355A4C218E770A8D3335364A2E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-08_e70c9deda8a46d17d362090115116287_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_e70c9deda8a46d17d362090115116287_coinminer_cryptolocker_elex
- Size 63KB
- SHA256 0891a3d324c4377733cf6ae6f2863d89184e32c753b17a27773a62c18e93fa91
- MD5 e70c9deda8a46d17d362090115116287
- SHA1 791ef4d735aebf0f661257edb784c130d7695675
- SHA512 1b837a182bc0664d42a1b1015ecb4ab524d98a75feec093f522097266560c0549367b0757e695ec2acc2b03b834b6e4badc5b0740d514aeb103d56c8ab3d48e6
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtjQ:qun/VbxjgQNQXtckstOOtEvwDpjfG
- TLSH T191534A62ABC815B2E2376775DCBBCA123117BC663D355A4C218E770A8D3335364A2E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE