General
- Target 2026-05-16_118afd98151a2bc9020320e04c13a9af_cryptolocker_elex
- Size 49KB
- Sample260516-j9vvpse15n
- SHA256 4c4c1f01d88bfaf00e9a420b105533753b38bc4a7a2c0d7de2d0a86597332d40
- MD5 118afd98151a2bc9020320e04c13a9af
- SHA1 953287d6d9865573d290c82cf66a97562793abc7
- SHA512 4f25b550d4711d3e8c4981b2062588540c8349b83d34fbabc61782f9958d063195236ba9b5510b4cbe826224dbb55e2797ac0afd857636c2c6487c13fc1373b5
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCAzr2ZEXIK/R:bgGYcA/53GAGgIvF9v2Z+
- TLSH T1743344387FE56972E37BCFB586F691C6B935B8223C16980D40DA43844833F65DCA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-16_118afd98151a2bc9020320e04c13a9af_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-16_118afd98151a2bc9020320e04c13a9af_cryptolocker_elex.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-16_118afd98151a2bc9020320e04c13a9af_cryptolocker_elex
- Size 49KB
- SHA256 4c4c1f01d88bfaf00e9a420b105533753b38bc4a7a2c0d7de2d0a86597332d40
- MD5 118afd98151a2bc9020320e04c13a9af
- SHA1 953287d6d9865573d290c82cf66a97562793abc7
- SHA512 4f25b550d4711d3e8c4981b2062588540c8349b83d34fbabc61782f9958d063195236ba9b5510b4cbe826224dbb55e2797ac0afd857636c2c6487c13fc1373b5
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCAzr2ZEXIK/R:bgGYcA/53GAGgIvF9v2Z+
- TLSH T1743344387FE56972E37BCFB586F691C6B935B8223C16980D40DA43844833F65DCA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE