General
- Target 2026-05-17_13653c7348d8d94b8f16c1a723ba2a52_cryptolocker_elex
- Size 44KB
- Sample260517-sqrtdaas51
- SHA256 9d600330f08223ef99cdc604a07b166877121cd3ca0df0e5f375665f0c3785b0
- MD5 13653c7348d8d94b8f16c1a723ba2a52
- SHA1 29261f2100766d6bb24c249ab5b7ffab5d517742
- SHA512 d53751ed00deb7e6174f5e0cff0a11ff6c7aeca0a0e8258a66d63bca84d12bd170eed31d81e325853188467d11377c54ea49100bd5a66a2ce71e80f9b4482b1b
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCTD:bgGYcA/53GAGgIvFG
- TLSH T17B1355387FE62972D37BDFB586F691C6B93578223D16980D40CA53844833F66EC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-17_13653c7348d8d94b8f16c1a723ba2a52_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-17_13653c7348d8d94b8f16c1a723ba2a52_cryptolocker_elex.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-17_13653c7348d8d94b8f16c1a723ba2a52_cryptolocker_elex
- Size 44KB
- SHA256 9d600330f08223ef99cdc604a07b166877121cd3ca0df0e5f375665f0c3785b0
- MD5 13653c7348d8d94b8f16c1a723ba2a52
- SHA1 29261f2100766d6bb24c249ab5b7ffab5d517742
- SHA512 d53751ed00deb7e6174f5e0cff0a11ff6c7aeca0a0e8258a66d63bca84d12bd170eed31d81e325853188467d11377c54ea49100bd5a66a2ce71e80f9b4482b1b
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCTD:bgGYcA/53GAGgIvFG
- TLSH T17B1355387FE62972D37BDFB586F691C6B93578223D16980D40CA53844833F66EC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detection of CryptoLocker Variants
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE