General
- Target 2026-10-28_712d44e8eb36ddbab2e4592080fe6ee9_coinminer_cryptolocker_elex
- Size 61KB
- Sample261030-cm7sesda75
- SHA256 839536215a5ec064e90eec21f2f0431a1b0d06a64eaa74166d5fae048bbd5403
- MD5 712d44e8eb36ddbab2e4592080fe6ee9
- SHA1 76ac7683a2226c6982198dfcd0c8b41aec261b1d
- SHA512 df0059bc53e8116d469e632907d1030c6b4d52802012c8b3da0fe28dacdfa08a09736d9b0f0f77fc1e15fe3aab84240e15848d8caa77a22f68b5a7ad63c22510
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoD/:qun/VbxjgQNQXtckstOOtEvwDpjf/
- TLSH T1D4534BA3A7C815E2E063227AAC7BCA12310BBD6969755A4C368D770BCD333532067D1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-10-28_712d44e8eb36ddbab2e4592080fe6ee9_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-28_712d44e8eb36ddbab2e4592080fe6ee9_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-28_712d44e8eb36ddbab2e4592080fe6ee9_coinminer_cryptolocker_elex
- Size 61KB
- SHA256 839536215a5ec064e90eec21f2f0431a1b0d06a64eaa74166d5fae048bbd5403
- MD5 712d44e8eb36ddbab2e4592080fe6ee9
- SHA1 76ac7683a2226c6982198dfcd0c8b41aec261b1d
- SHA512 df0059bc53e8116d469e632907d1030c6b4d52802012c8b3da0fe28dacdfa08a09736d9b0f0f77fc1e15fe3aab84240e15848d8caa77a22f68b5a7ad63c22510
- SSDEEP 384:qubLCePtTXYLHav9NJaKCEkKH5vQbrtckstOOtEvwDpjqIGRYqoD/:qun/VbxjgQNQXtckstOOtEvwDpjf/
- TLSH T1D4534BA3A7C815E2E063227AAC7BCA12310BBD6969755A4C368D770BCD333532067D1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detection of CryptoLocker Variants
- Custom signature
Detection of Cryptolocker Samples
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE