General
- Target 2026-09-25_ed0bb6b52be6b255dc69e85ae4829862_coinminer_cryptolocker_elex
- Size 47KB
- Sample260925-v9bydasemd
- SHA256 55e887bdd8c684c4aeda95d3b2caed39c25652f270282cf9b3b645ae4a91af7e
- MD5 ed0bb6b52be6b255dc69e85ae4829862
- SHA1 27ebef1912a084ac84d81d5f706614a75f28fc0a
- SHA512 7141d9b29d5c50a77015e1a8f1c7cd63af3da9dc2c5b5de2a3717f6a06f8c45ca928657ece2b2c2cc9828c0f8102146240f35d717497b3938c13c9325c8c0ff0
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjGLGt:qUmnpomddpMOtEvwDpjjaYaFAeGL6
- TLSH T1952321386FD51A72E377DAB6C5F695C2B926B8237C129D0D40CE17450C23F52ACA2E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-09-25_ed0bb6b52be6b255dc69e85ae4829862_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-25_ed0bb6b52be6b255dc69e85ae4829862_coinminer_cryptolocker_elex
- Size 47KB
- SHA256 55e887bdd8c684c4aeda95d3b2caed39c25652f270282cf9b3b645ae4a91af7e
- MD5 ed0bb6b52be6b255dc69e85ae4829862
- SHA1 27ebef1912a084ac84d81d5f706614a75f28fc0a
- SHA512 7141d9b29d5c50a77015e1a8f1c7cd63af3da9dc2c5b5de2a3717f6a06f8c45ca928657ece2b2c2cc9828c0f8102146240f35d717497b3938c13c9325c8c0ff0
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjGLGt:qUmnpomddpMOtEvwDpjjaYaFAeGL6
- TLSH T1952321386FD51A72E377DAB6C5F695C2B926B8237C129D0D40CE17450C23F52ACA2E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE