General
- Target 2026-05-07_bf46ac3fcf27cf8227c39c5fd5bef40c_cryptolocker_elex
- Size 48KB
- Sample260507-krpreaat2w
- SHA256 aa0495e2f43713d702d723fe0603eca74139a47d2a0f217b7f2465e75053aa2f
- MD5 bf46ac3fcf27cf8227c39c5fd5bef40c
- SHA1 d9a9356400b04e83d9079b3033c0ffc2b7766a5c
- SHA512 b4eee7b70cbe823274ebc98be227aa751d1527e70ae192ed6dd0e38c9854ccbd018e11916487b1d2f8f33a8b1e44f62b54506a1639f271742833bc22ff6d573f
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXQ1JL:bgGYcA/53GAGgIvFW1l
- TLSH T16B2333387FE62932E37BDFB586F691C6B93578223D16980D40CA43844833F65DCA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-07_bf46ac3fcf27cf8227c39c5fd5bef40c_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-07_bf46ac3fcf27cf8227c39c5fd5bef40c_cryptolocker_elex.exe
Resource
win11-20250502-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-07_bf46ac3fcf27cf8227c39c5fd5bef40c_cryptolocker_elex
- Size 48KB
- SHA256 aa0495e2f43713d702d723fe0603eca74139a47d2a0f217b7f2465e75053aa2f
- MD5 bf46ac3fcf27cf8227c39c5fd5bef40c
- SHA1 d9a9356400b04e83d9079b3033c0ffc2b7766a5c
- SHA512 b4eee7b70cbe823274ebc98be227aa751d1527e70ae192ed6dd0e38c9854ccbd018e11916487b1d2f8f33a8b1e44f62b54506a1639f271742833bc22ff6d573f
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXQ1JL:bgGYcA/53GAGgIvFW1l
- TLSH T16B2333387FE62932E37BDFB586F691C6B93578223D16980D40CA43844833F65DCA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE