General
- Target 2026-04-25_b7e4da5c722217c583781bfbc68d6e5d_cryptolocker_elex
- Size 42KB
- Sample260425-ddtpwadv4s
- SHA256 6a3fe00ca31fb2d00d06cd0b34a37cd473e73ffccd0af5d1ba6dfbc39ad5ad54
- MD5 b7e4da5c722217c583781bfbc68d6e5d
- SHA1 8e16ce066783e8c7dcd9adb491f25592c6120c06
- SHA512 3879701ffae19a7e3dd097db8247503fc713f005344725b0b0d0ecadf4d0449a5e77d28b85cb958999aeef1890495519beb72eb75667b83aceaf24abae28c63a
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpc89NKA/:bgGYcA/53GAGgIvFWEY
- TLSH T1141352387FD62972D37BDFB586F691C6B935B8223D16880D40CA53844833F66EC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-25_b7e4da5c722217c583781bfbc68d6e5d_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-25_b7e4da5c722217c583781bfbc68d6e5d_cryptolocker_elex.exe
Resource
win11-20260130-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-25_b7e4da5c722217c583781bfbc68d6e5d_cryptolocker_elex
- Size 42KB
- SHA256 6a3fe00ca31fb2d00d06cd0b34a37cd473e73ffccd0af5d1ba6dfbc39ad5ad54
- MD5 b7e4da5c722217c583781bfbc68d6e5d
- SHA1 8e16ce066783e8c7dcd9adb491f25592c6120c06
- SHA512 3879701ffae19a7e3dd097db8247503fc713f005344725b0b0d0ecadf4d0449a5e77d28b85cb958999aeef1890495519beb72eb75667b83aceaf24abae28c63a
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpc89NKA/:bgGYcA/53GAGgIvFWEY
- TLSH T1141352387FD62972D37BDFB586F691C6B935B8223D16880D40CA53844833F66EC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE