General
- Target 2026-05-04_3441aab974392b49a7ae526c245500f7_cryptolocker_elex
- Size 40KB
- Sample260504-d4b8hsfv4p
- SHA256 6ba3558759c8a635a57bad14468d84dd09d0236ee524ae818a974bee5b7dd4a2
- MD5 3441aab974392b49a7ae526c245500f7
- SHA1 2699ca34b908024f973d33426bde18c0a48b03d5
- SHA512 9b87fa01efdf98c0a554bfbcfa3452963eb6672ca0f8600d1cfdffbfe8ba510d18f176201c8ab39ef451c9b3c4da2ed56ce466997db4cd9cfe4fe5cc9daf8945
- SSDEEP 384:bgM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzorw7SigsXmyuvLVHN4X/xtBX:blo/2n1TCraU6GD1a4XcsSKNuxNwX
- TLSH T1AB035138BEE95972D377C67585F2A1C2B93A7C123D02580E55CBA3880D33B5BBD90A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-04_3441aab974392b49a7ae526c245500f7_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_3441aab974392b49a7ae526c245500f7_cryptolocker_elex.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_3441aab974392b49a7ae526c245500f7_cryptolocker_elex
- Size 40KB
- SHA256 6ba3558759c8a635a57bad14468d84dd09d0236ee524ae818a974bee5b7dd4a2
- MD5 3441aab974392b49a7ae526c245500f7
- SHA1 2699ca34b908024f973d33426bde18c0a48b03d5
- SHA512 9b87fa01efdf98c0a554bfbcfa3452963eb6672ca0f8600d1cfdffbfe8ba510d18f176201c8ab39ef451c9b3c4da2ed56ce466997db4cd9cfe4fe5cc9daf8945
- SSDEEP 384:bgM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzorw7SigsXmyuvLVHN4X/xtBX:blo/2n1TCraU6GD1a4XcsSKNuxNwX
- TLSH T1AB035138BEE95972D377C67585F2A1C2B93A7C123D02580E55CBA3880D33B5BBD90A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detection of CryptoLocker Variants
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE