General
- Target 2026-05-04_4c0b8c49fc3703256c73e7a02206f13a_cryptolocker_elex
- Size 35KB
- Sample260504-ptefnsbx91
- SHA256 a70a6a36257ac3b3ef018af76d3affd8c3a024d4f24e4e35ca1a1692619283de
- MD5 4c0b8c49fc3703256c73e7a02206f13a
- SHA1 78cd2a80452b2df9de701abd7c42a32eb8169994
- SHA512 b45543a190b1c5d539915c357397d9849b80f87d583f1bd2c6d3ea553fccd420c07d3bb15ec7850db2a137235897b40b0debfdf78fc8beded9b2345489b0bf96
- SSDEEP 384:b30V/YPvnr801TRoUGPh4TKt6ATt1DqgPg3tcS/zzoJUMnEOAT5UG:b3o/2n1TCraU6GD1gdcKXwUMnRATaG
- TLSH T160F2B539BFE55962D377867414F3E0C1BA3B7C523906591EA6CBB3880937B0ABC50A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-04_4c0b8c49fc3703256c73e7a02206f13a_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-04_4c0b8c49fc3703256c73e7a02206f13a_cryptolocker_elex.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-04_4c0b8c49fc3703256c73e7a02206f13a_cryptolocker_elex
- Size 35KB
- SHA256 a70a6a36257ac3b3ef018af76d3affd8c3a024d4f24e4e35ca1a1692619283de
- MD5 4c0b8c49fc3703256c73e7a02206f13a
- SHA1 78cd2a80452b2df9de701abd7c42a32eb8169994
- SHA512 b45543a190b1c5d539915c357397d9849b80f87d583f1bd2c6d3ea553fccd420c07d3bb15ec7850db2a137235897b40b0debfdf78fc8beded9b2345489b0bf96
- SSDEEP 384:b30V/YPvnr801TRoUGPh4TKt6ATt1DqgPg3tcS/zzoJUMnEOAT5UG:b3o/2n1TCraU6GD1gdcKXwUMnRATaG
- TLSH T160F2B539BFE55962D377867414F3E0C1BA3B7C523906591EA6CBB3880937B0ABC50A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detection of CryptoLocker Variants
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE