General
- Target 2026-10-13_e9192896b368a9d93f0b61705eef4485_coinminer_cryptolocker_elex
- Size 49KB
- Sample261014-c4tbcseb94
- SHA256 eed80b38aea3c3cefa42e72c03472fa8c647f6b0929e480f0ae0de72e6c0b50c
- MD5 e9192896b368a9d93f0b61705eef4485
- SHA1 cc94e996e27629e2f19a442182197e15f4f95c35
- SHA512 2db2468c452d4ce1bf35ade93879eb71dd3c24892caba3ba5d72b7acdaaadf435bf2142b5ce24d6276ed2f78f9be0458c59388381b488197745bed81bee7e04f
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfog:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8g
- TLSH T1393300386FD51AB2E377DAB6C5F695C2B936B8227C12990C50CE17450C33F52ACA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-13_e9192896b368a9d93f0b61705eef4485_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-13_e9192896b368a9d93f0b61705eef4485_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-13_e9192896b368a9d93f0b61705eef4485_coinminer_cryptolocker_elex
- Size 49KB
- SHA256 eed80b38aea3c3cefa42e72c03472fa8c647f6b0929e480f0ae0de72e6c0b50c
- MD5 e9192896b368a9d93f0b61705eef4485
- SHA1 cc94e996e27629e2f19a442182197e15f4f95c35
- SHA512 2db2468c452d4ce1bf35ade93879eb71dd3c24892caba3ba5d72b7acdaaadf435bf2142b5ce24d6276ed2f78f9be0458c59388381b488197745bed81bee7e04f
- SSDEEP 768:qUmnjFom/kLyMro2GtOOtEvwDpjeMLam5aFr7YOzzOQjG/1iTfog:qUmnpomddpMOtEvwDpjjaYaFAeG/Y8g
- TLSH T1393300386FD51AB2E377DAB6C5F695C2B936B8227C12990C50CE17450C33F52ACA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE