General
- Target 2026-04-20_a8b50ad92bbf0b2644ab53e8fd1a93c7_cryptolocker_elex
- Size 52KB
- Sample260420-krvbwsdt4j
- SHA256 d53c03136c3a0502963af4d2196f5eeadf8f4a5f42dd3f99c280738e65063c74
- MD5 a8b50ad92bbf0b2644ab53e8fd1a93c7
- SHA1 b08aac695ab263955eb3d1201897ce6a98e30743
- SHA512 2f6e8c48cc0e8187b77885a2071757867e83319f03215f2a470134a7f30a1224a7e4cf5480dc625df3a5caf8a980c20f77d2f8a60d0d33f0afd92cbfc9f4b0e7
- SSDEEP 768:bAvJCYOOvbRPDEgXrNekd7l94i3pQhDZJEjy73bx8B7f2nx+rVJHczKoyldEr:bAvJCF+RQgJeab4sCkUrCKeVKfyl6r
- TLSH T16033A539BFD41A72D37786B185F7A1C2BE35B8223916A81D54CE634C0933F16BDA1A0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-20_a8b50ad92bbf0b2644ab53e8fd1a93c7_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-20_a8b50ad92bbf0b2644ab53e8fd1a93c7_cryptolocker_elex.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-20_a8b50ad92bbf0b2644ab53e8fd1a93c7_cryptolocker_elex
- Size 52KB
- SHA256 d53c03136c3a0502963af4d2196f5eeadf8f4a5f42dd3f99c280738e65063c74
- MD5 a8b50ad92bbf0b2644ab53e8fd1a93c7
- SHA1 b08aac695ab263955eb3d1201897ce6a98e30743
- SHA512 2f6e8c48cc0e8187b77885a2071757867e83319f03215f2a470134a7f30a1224a7e4cf5480dc625df3a5caf8a980c20f77d2f8a60d0d33f0afd92cbfc9f4b0e7
- SSDEEP 768:bAvJCYOOvbRPDEgXrNekd7l94i3pQhDZJEjy73bx8B7f2nx+rVJHczKoyldEr:bAvJCF+RQgJeab4sCkUrCKeVKfyl6r
- TLSH T16033A539BFD41A72D37786B185F7A1C2BE35B8223916A81D54CE634C0933F16BDA1A0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE