General
- Target 2026-04-20_64499dad73fdeac4e1b862575ee9de64_cryptolocker_elex
- Size 40KB
- Sample260420-fn7etsdv71
- SHA256 33ad1e1047dbec8e7cf17ddc1d31d5ab41efa43bf6ad32fe28540f76f660040a
- MD5 64499dad73fdeac4e1b862575ee9de64
- SHA1 5f27accc8239c0a20a5d299a720678a46e6d3c7e
- SHA512 0e71553024d9fed74526b26d86280a5d9aa949b475dc0cc15a8c23b9b60e715d3e027a2a09547b26da2dee70ada2c79ee4de44db80ecaeaca4b32dc6a8c6f753
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcJ6L:bgGYcA/53GAGgIvF70
- TLSH T1821383387FD62932D37BDEB586F691C6B935B8223D16880D54CA53844C33F66EC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-20_64499dad73fdeac4e1b862575ee9de64_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_64499dad73fdeac4e1b862575ee9de64_cryptolocker_elex.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_64499dad73fdeac4e1b862575ee9de64_cryptolocker_elex
- Size 40KB
- SHA256 33ad1e1047dbec8e7cf17ddc1d31d5ab41efa43bf6ad32fe28540f76f660040a
- MD5 64499dad73fdeac4e1b862575ee9de64
- SHA1 5f27accc8239c0a20a5d299a720678a46e6d3c7e
- SHA512 0e71553024d9fed74526b26d86280a5d9aa949b475dc0cc15a8c23b9b60e715d3e027a2a09547b26da2dee70ada2c79ee4de44db80ecaeaca4b32dc6a8c6f753
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcJ6L:bgGYcA/53GAGgIvF70
- TLSH T1821383387FD62932D37BDEB586F691C6B935B8223D16880D54CA53844C33F66EC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE