General
- Target 2026-05-05_adbebe5c4f1a7d868198c50fe682c168_cryptolocker_elex
- Size 40KB
- Sample260505-jrfcasey5p
- SHA256 a7c1bccb618e51e3d1d57d4d32e1ce716c4f4b6bded807892b54dbdbf6a0a236
- MD5 adbebe5c4f1a7d868198c50fe682c168
- SHA1 4a496a30e10728335ff20999c46c79a9398e8c1f
- SHA512 c03cc8da33c34352cd4bb091513378f2ae20d7438213ce9df54e11522998a91f7eeaeca7302d82beb6ff646a84033e6e5985af9c01843961c6607c24b63d3338
- SSDEEP 384:bgM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzorw7SigsXmyuvLVHN4X/xtB3:blo/2n1TCraU6GD1a4XcsSKNuxNw3
- TLSH T1CB134138BEE95972D377C67585F2A1C2B93A7C123D02580E55CBA3880D33B1BBD90A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-05_adbebe5c4f1a7d868198c50fe682c168_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_adbebe5c4f1a7d868198c50fe682c168_cryptolocker_elex.exe
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_adbebe5c4f1a7d868198c50fe682c168_cryptolocker_elex
- Size 40KB
- SHA256 a7c1bccb618e51e3d1d57d4d32e1ce716c4f4b6bded807892b54dbdbf6a0a236
- MD5 adbebe5c4f1a7d868198c50fe682c168
- SHA1 4a496a30e10728335ff20999c46c79a9398e8c1f
- SHA512 c03cc8da33c34352cd4bb091513378f2ae20d7438213ce9df54e11522998a91f7eeaeca7302d82beb6ff646a84033e6e5985af9c01843961c6607c24b63d3338
- SSDEEP 384:bgM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzorw7SigsXmyuvLVHN4X/xtB3:blo/2n1TCraU6GD1a4XcsSKNuxNw3
- TLSH T1CB134138BEE95972D377C67585F2A1C2B93A7C123D02580E55CBA3880D33B1BBD90A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE