General
- Target 2026-09-10_6f6eb0e7cec16fe9fe5d767106cd6872_coinminer_cryptolocker_elex
- Size 67KB
- Sample260910-sznhbade98
- SHA256 40ca559c6a2ec3502260d42f491dc3ad60f5a00711bdb70d3673f83eb8cd62aa
- MD5 6f6eb0e7cec16fe9fe5d767106cd6872
- SHA1 d766f6e10aef1d386fc168841be777a905a0fa5b
- SHA512 064338c394efe1bd57eda5d38f67351956365b5622dc50a39b8cfda0639f36fc095b67956f63d94d10e498a40206f011ae360f89ec30e11813cac6f7b19e1b1e
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwf4H:qun/VbxjgQNQXtckstOOtEvwDpjfufg
- TLSH T177630965ABD815B2E377A77599F7C682352BBC623D229D0C20CA73054C33B52A861F1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-10_6f6eb0e7cec16fe9fe5d767106cd6872_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_6f6eb0e7cec16fe9fe5d767106cd6872_coinminer_cryptolocker_elex
- Size 67KB
- SHA256 40ca559c6a2ec3502260d42f491dc3ad60f5a00711bdb70d3673f83eb8cd62aa
- MD5 6f6eb0e7cec16fe9fe5d767106cd6872
- SHA1 d766f6e10aef1d386fc168841be777a905a0fa5b
- SHA512 064338c394efe1bd57eda5d38f67351956365b5622dc50a39b8cfda0639f36fc095b67956f63d94d10e498a40206f011ae360f89ec30e11813cac6f7b19e1b1e
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoDdxtwf4H:qun/VbxjgQNQXtckstOOtEvwDpjfufg
- TLSH T177630965ABD815B2E377A77599F7C682352BBC623D229D0C20CA73054C33B52A861F1F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE