General
- Target 2026-05-04_ec007c2ed142b77aa048d42a1cf3d089_cryptolocker_elex
- Size 51KB
- Sample260504-jqq3eaev2y
- SHA256 69baef0afe31960f2f1f5cf741b087966464b68a9483e933c947c668e67eed41
- MD5 ec007c2ed142b77aa048d42a1cf3d089
- SHA1 8134092f59b1be3502b048bd1be73956f0fe7f3b
- SHA512 eed6b606909ad57a59c6e9cbe636266d741d967e91af3ca2b2089a559bd05c95b6b70ed3e95a621cf754a39b7d71880625e91e20072c6203cb6ef0c8aaba7c44
- SSDEEP 768:5Qz7yVEhs9+js1SQtOOtEvwDpj6/4houzaLKJ5ZO9+4tKMe:5j+jsMQMOtEvwDpjK4WvLKb6Ht1e
- TLSH T18833C7372AD529F3D33397B0A8F695C2B622BC917E314A8D948633454833786ADD3E1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-05-04_ec007c2ed142b77aa048d42a1cf3d089_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_ec007c2ed142b77aa048d42a1cf3d089_cryptolocker_elex.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_ec007c2ed142b77aa048d42a1cf3d089_cryptolocker_elex
- Size 51KB
- SHA256 69baef0afe31960f2f1f5cf741b087966464b68a9483e933c947c668e67eed41
- MD5 ec007c2ed142b77aa048d42a1cf3d089
- SHA1 8134092f59b1be3502b048bd1be73956f0fe7f3b
- SHA512 eed6b606909ad57a59c6e9cbe636266d741d967e91af3ca2b2089a559bd05c95b6b70ed3e95a621cf754a39b7d71880625e91e20072c6203cb6ef0c8aaba7c44
- SSDEEP 768:5Qz7yVEhs9+js1SQtOOtEvwDpj6/4houzaLKJ5ZO9+4tKMe:5j+jsMQMOtEvwDpjK4WvLKb6Ht1e
- TLSH T18833C7372AD529F3D33397B0A8F695C2B622BC917E314A8D948633454833786ADD3E1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detection of CryptoLocker Variants
- Custom signature
Detection of Cryptolocker Samples
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE