General
- Target 2026-11-09_3381849c4c865954036d511b2ea47aa3_coinminer_cryptolocker_elex
- Size 72KB
- Sample261110-22d64adx8v
- SHA256 bf535714729c61a20e45d5e48a178710da1ddb81f3816c2975bc09ac7bcb9f11
- MD5 3381849c4c865954036d511b2ea47aa3
- SHA1 8524c3a253fede34448a881e29df3c8411fb9d7e
- SHA512 26fa2351ad8287470a748872cf270d937e579f6f374a5530633ad3fcacd5e2cf1d06e356622c1ab20976e7229f21876787ad5543be5d4c039fc9823496efaed5
- SSDEEP 1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAeOy:78SEOtEvwDpjWYvQd2Pfy
- TLSH T10C73A4387AD415B2E377867585F685D2B936BC227C61990F34CA334D4833F62ACA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_3381849c4c865954036d511b2ea47aa3_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_3381849c4c865954036d511b2ea47aa3_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_3381849c4c865954036d511b2ea47aa3_coinminer_cryptolocker_elex
- Size 72KB
- SHA256 bf535714729c61a20e45d5e48a178710da1ddb81f3816c2975bc09ac7bcb9f11
- MD5 3381849c4c865954036d511b2ea47aa3
- SHA1 8524c3a253fede34448a881e29df3c8411fb9d7e
- SHA512 26fa2351ad8287470a748872cf270d937e579f6f374a5530633ad3fcacd5e2cf1d06e356622c1ab20976e7229f21876787ad5543be5d4c039fc9823496efaed5
- SSDEEP 1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAeOy:78SEOtEvwDpjWYvQd2Pfy
- TLSH T10C73A4387AD415B2E377867585F685D2B936BC227C61990F34CA334D4833F62ACA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detection of CryptoLocker Variants
- Custom signature
Detection of Cryptolocker Samples
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE