General
- Target 2026-11-09_8ea911efd0c60c9da5f09b2ea095e0d8_coinminer_cryptolocker_elex
- Size 71KB
- Sample261110-p3mteafe72
- SHA256 86964e299adbd47c30b5c33a3e12aad5bf3ed4ae68ad16c377c2114ccf494db3
- MD5 8ea911efd0c60c9da5f09b2ea095e0d8
- SHA1 8e1435afe2d52b2f8221fe7cea6ecba5d987e36a
- SHA512 9d2ba368e853b19cf29a31f339dc703fac20b8edbcdc536ab6fbf7526077325c2460b3b1b6e4a6ac79ad9affbf86dc5ef09dd6384096b575db552520c121d6eb
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8M:76a+CdOOtEvwDpjQ9P
- TLSH T14F634F396FD51A72E377CAB585F682C3B936B8223822990D50CE17454C33B56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_8ea911efd0c60c9da5f09b2ea095e0d8_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_8ea911efd0c60c9da5f09b2ea095e0d8_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_8ea911efd0c60c9da5f09b2ea095e0d8_coinminer_cryptolocker_elex
- Size 71KB
- SHA256 86964e299adbd47c30b5c33a3e12aad5bf3ed4ae68ad16c377c2114ccf494db3
- MD5 8ea911efd0c60c9da5f09b2ea095e0d8
- SHA1 8e1435afe2d52b2f8221fe7cea6ecba5d987e36a
- SHA512 9d2ba368e853b19cf29a31f339dc703fac20b8edbcdc536ab6fbf7526077325c2460b3b1b6e4a6ac79ad9affbf86dc5ef09dd6384096b575db552520c121d6eb
- SSDEEP 1536:76QFElP6n+gKmddpMOtEvwDpj9aYaFAeG/Y8M:76a+CdOOtEvwDpjQ9P
- TLSH T14F634F396FD51A72E377CAB585F682C3B936B8223822990D50CE17454C33B56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detection of CryptoLocker Variants
- Custom signature
Detection of Cryptolocker Samples
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE