General
- Target 2026-05-05_249b1d8b3e64987f242d8d756498a96f_cryptolocker_elex
- Size 77KB
- Sample260505-pg85hsbv9n
- SHA256 e629168e55d7d097d1dc195e14370fb5b269af4b688efe1b4f62e75291d366cc
- MD5 249b1d8b3e64987f242d8d756498a96f
- SHA1 1a1a9cb4b95d96dfa643950eaa372f74a25d2f04
- SHA512 304bfecba1ebb2f72b4d2d7951be75505c71c665e2a29f29b39a2311bc2aaeb6802ded4d35f249f0e2a36eabb0543eb4f719fdf4d50d35df08e8d81f3b9a6713
- SSDEEP 1536:vj+jsMQMOtEvwDpj5HczerLO04BGc189Y0RxKFgzkibpK:vCjsIOtEvwDpj5HGWY0RkfL
- TLSH T1EA73FE396FD91672E37BDAB5CAF691C6BA75B4223D12980D40CA43440C33F56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-05-05_249b1d8b3e64987f242d8d756498a96f_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-05_249b1d8b3e64987f242d8d756498a96f_cryptolocker_elex.exe
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-05_249b1d8b3e64987f242d8d756498a96f_cryptolocker_elex
- Size 77KB
- SHA256 e629168e55d7d097d1dc195e14370fb5b269af4b688efe1b4f62e75291d366cc
- MD5 249b1d8b3e64987f242d8d756498a96f
- SHA1 1a1a9cb4b95d96dfa643950eaa372f74a25d2f04
- SHA512 304bfecba1ebb2f72b4d2d7951be75505c71c665e2a29f29b39a2311bc2aaeb6802ded4d35f249f0e2a36eabb0543eb4f719fdf4d50d35df08e8d81f3b9a6713
- SSDEEP 1536:vj+jsMQMOtEvwDpj5HczerLO04BGc189Y0RxKFgzkibpK:vCjsIOtEvwDpj5HGWY0RkfL
- TLSH T1EA73FE396FD91672E37BDAB5CAF691C6BA75B4223D12980D40CA43440C33F56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detection of CryptoLocker Variants
- Custom signature
Detection of Cryptolocker Samples
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE