General
- Target 2026-05-24_e659d92695d25b0ff359b1981a936e2b_cryptolocker_elex
- Size 50KB
- Sample260524-3dblqsct9w
- SHA256 90f51b86d0e79a4555c594bc9c459f1e44d2be492f176e8e6241b4fdc9517e0b
- MD5 e659d92695d25b0ff359b1981a936e2b
- SHA1 a9e701e107369d4be1227f7eec5786ebfbdebc9b
- SHA512 8c50b1aa2704eb509d5dbc61a27e8de559bae92661d6ba857f47ac2256a49d56d8dc87ca16f0875606971366a3ec1ef638b8aca781cb25bf668897bef9045347
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCAzr2ZEXIK/2:bgGYcA/53GAGgIvF9v2ZJ
- TLSH T17D3333387FE56972E37BCFB586F691C2B935B8223D16980D40DA43844833F65DCA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-24_e659d92695d25b0ff359b1981a936e2b_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-24_e659d92695d25b0ff359b1981a936e2b_cryptolocker_elex.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-24_e659d92695d25b0ff359b1981a936e2b_cryptolocker_elex
- Size 50KB
- SHA256 90f51b86d0e79a4555c594bc9c459f1e44d2be492f176e8e6241b4fdc9517e0b
- MD5 e659d92695d25b0ff359b1981a936e2b
- SHA1 a9e701e107369d4be1227f7eec5786ebfbdebc9b
- SHA512 8c50b1aa2704eb509d5dbc61a27e8de559bae92661d6ba857f47ac2256a49d56d8dc87ca16f0875606971366a3ec1ef638b8aca781cb25bf668897bef9045347
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCAzr2ZEXIK/2:bgGYcA/53GAGgIvF9v2ZJ
- TLSH T17D3333387FE56972E37BCFB586F691C2B935B8223D16980D40DA43844833F65DCA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detection of CryptoLocker Variants
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE