General
- Target 2026-11-09_52d4af6357ba598fd77e004b51389bbb_coinminer_cryptolocker_elex
- Size 72KB
- Sample261110-ycrjca1w4k
- SHA256 02154f3496dcf9bf724164774798e31b72d934b8141adeb5c8d448b4bb459d97
- MD5 52d4af6357ba598fd77e004b51389bbb
- SHA1 0794612fae9dbd3846476a29377bf6d9c10920b7
- SHA512 5308efd05ed1fe33989f6712b741a729fb7f30ff5c16d32213a88b28fbb3d0b0b3cfb7e59bba2eb3c685c20bcbff844eb9369dc17ac5790392b23ce8df05d122
- SSDEEP 1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAeOD:78SEOtEvwDpjWYvQd2PfD
- TLSH T14773A4387AD415B2E377867585F685D2B936BC227C61990F34CA334D4833F62ACA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
2026-11-09_52d4af6357ba598fd77e004b51389bbb_coinminer_cryptolocker_elex.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-11-09_52d4af6357ba598fd77e004b51389bbb_coinminer_cryptolocker_elex.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-09_52d4af6357ba598fd77e004b51389bbb_coinminer_cryptolocker_elex
- Size 72KB
- SHA256 02154f3496dcf9bf724164774798e31b72d934b8141adeb5c8d448b4bb459d97
- MD5 52d4af6357ba598fd77e004b51389bbb
- SHA1 0794612fae9dbd3846476a29377bf6d9c10920b7
- SHA512 5308efd05ed1fe33989f6712b741a729fb7f30ff5c16d32213a88b28fbb3d0b0b3cfb7e59bba2eb3c685c20bcbff844eb9369dc17ac5790392b23ce8df05d122
- SSDEEP 1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAeOD:78SEOtEvwDpjWYvQd2PfD
- TLSH T14773A4387AD415B2E377867585F685D2B936BC227C61990F34CA334D4833F62ACA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detection of CryptoLocker Variants
- Custom signature
Detection of Cryptolocker Samples
- Custom signature
UPX dump on OEP (original entry point)
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE