General
- Target 2026-10-10_9ff4dd0eaea2adf219c08f8fcc0a64bf_coinminer_cryptolocker_elex
- Size 49KB
- Sample261011-hvmecadf83
- SHA256 6b42aa8943c3bbd0182c3dbcfc1c7a7adf45383747b9b0a9d86faad25895be5e
- MD5 9ff4dd0eaea2adf219c08f8fcc0a64bf
- SHA1 d5a49a1f809d19ded9a57ff6e0e5732837b5d28b
- SHA512 6192c57468dfc2a4a49ced689ff33884fff2337233b98181f9e30e02ab8ef92a0be254841ad5ecea623cf7a68baf481d0689b15a7b8f9074dbd28556eed36612
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfo7:qUmnpomddpMOtEvwDpjjaYaFAeG/Y87
- TLSH T17F3310386FD51AB2E377DAB6C5F695C2B936B8237C129D0C50CA17450C23F52ACA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-10_9ff4dd0eaea2adf219c08f8fcc0a64bf_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-10_9ff4dd0eaea2adf219c08f8fcc0a64bf_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-10_9ff4dd0eaea2adf219c08f8fcc0a64bf_coinminer_cryptolocker_elex
- Size 49KB
- SHA256 6b42aa8943c3bbd0182c3dbcfc1c7a7adf45383747b9b0a9d86faad25895be5e
- MD5 9ff4dd0eaea2adf219c08f8fcc0a64bf
- SHA1 d5a49a1f809d19ded9a57ff6e0e5732837b5d28b
- SHA512 6192c57468dfc2a4a49ced689ff33884fff2337233b98181f9e30e02ab8ef92a0be254841ad5ecea623cf7a68baf481d0689b15a7b8f9074dbd28556eed36612
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfo7:qUmnpomddpMOtEvwDpjjaYaFAeG/Y87
- TLSH T17F3310386FD51AB2E377DAB6C5F695C2B936B8237C129D0C50CA17450C23F52ACA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE