General
- Target 2026-05-25_619ebfec39041cf80fcac9d17effefda_cryptolocker_elex
- Size 42KB
- Sample260525-rsplcses2x
- SHA256 82347d3b6b51d3ac9444e2c6d1c8ca23d328f5c1503b7ccad902c3c80d88d6d5
- MD5 619ebfec39041cf80fcac9d17effefda
- SHA1 17693d32a5e694af3f6d0720de8bc701ec778f84
- SHA512 a0187a677b1444568af4f0e152a01b023c2032e99c4c91a3d4432380aa0a8c44a2eb68e3c3163b61115abae4213eaeb52bb5f3890d45defb6e38b14ae288b52e
- SSDEEP 768:bFo/2n1TCraU6GD1aIXcn62tH/1/LpP+TX:bC/y2Zm6iH/NLpIX
- TLSH T1AA1343387FE45972E377C67595F3A1C6B93A78123D029C0E55CBA3880833B5AED90A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-05-25_619ebfec39041cf80fcac9d17effefda_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-25_619ebfec39041cf80fcac9d17effefda_cryptolocker_elex.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-25_619ebfec39041cf80fcac9d17effefda_cryptolocker_elex
- Size 42KB
- SHA256 82347d3b6b51d3ac9444e2c6d1c8ca23d328f5c1503b7ccad902c3c80d88d6d5
- MD5 619ebfec39041cf80fcac9d17effefda
- SHA1 17693d32a5e694af3f6d0720de8bc701ec778f84
- SHA512 a0187a677b1444568af4f0e152a01b023c2032e99c4c91a3d4432380aa0a8c44a2eb68e3c3163b61115abae4213eaeb52bb5f3890d45defb6e38b14ae288b52e
- SSDEEP 768:bFo/2n1TCraU6GD1aIXcn62tH/1/LpP+TX:bC/y2Zm6iH/NLpIX
- TLSH T1AA1343387FE45972E377C67595F3A1C6B93A78123D029C0E55CBA3880833B5AED90A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE