General
- Target 2026-10-08_2908cb428ea6937c51b5ceb386308d53_coinminer_cryptolocker_elex
- Size 71KB
- Sample261009-xapfjadf42
- SHA256 5ad4a5d5ce6f25d66fee37da7fa5e94876af9d9e5b643658b6bd7cc5acbeaaae
- MD5 2908cb428ea6937c51b5ceb386308d53
- SHA1 c9576ac9db1cdfe88799a7252d0f4d630c6788b1
- SHA512 8b24de8bb285a396aeae0a2e76b8d6fc609434524d3cb1cddaabfff593d775f612d0ef67ac7b2c33e975edc8334e8803ccf8d71b83c33912fef095a4aac949dc
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8y:76a+CdOOtEvwDpjQ91
- TLSH T1EF6340396FD51A72E3B7CAB585F681C3B936B8233822990D50CE17414C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-08_2908cb428ea6937c51b5ceb386308d53_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_2908cb428ea6937c51b5ceb386308d53_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_2908cb428ea6937c51b5ceb386308d53_coinminer_cryptolocker_elex
- Size 71KB
- SHA256 5ad4a5d5ce6f25d66fee37da7fa5e94876af9d9e5b643658b6bd7cc5acbeaaae
- MD5 2908cb428ea6937c51b5ceb386308d53
- SHA1 c9576ac9db1cdfe88799a7252d0f4d630c6788b1
- SHA512 8b24de8bb285a396aeae0a2e76b8d6fc609434524d3cb1cddaabfff593d775f612d0ef67ac7b2c33e975edc8334e8803ccf8d71b83c33912fef095a4aac949dc
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8y:76a+CdOOtEvwDpjQ91
- TLSH T1EF6340396FD51A72E3B7CAB585F681C3B936B8233822990D50CE17414C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE