General
- Target 2026-06-04_74218ce4da58d3cc9b07b8062644d91d_cryptolocker_elex
- Size 52KB
- Sample260604-npcwlset5p
- SHA256 c545ed703b1df632b50d346a3d5f1ece84a31a5c71eadf0e8be940b20cd7a4f0
- MD5 74218ce4da58d3cc9b07b8062644d91d
- SHA1 b55c0c314402a0425bbab4d3ff621c5f227b48ad
- SHA512 f120b9767e3b039f5b91ddd0f4d4eb13b69951a99e1fc2dac3cb9449e16b18c8f39452d8302a53f8c7043920ed7a61d6412b4e95d8cf835a38f7996e14fd9078
- SSDEEP 768:Z6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzOQjGL5:Z6QFElP6n+gMQMOtEvwDpjyaYaFAeGL5
- TLSH T1FC332F386FD51A72E377CAB585F682C3B936B8237822990D50CE17414C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-04_74218ce4da58d3cc9b07b8062644d91d_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-04_74218ce4da58d3cc9b07b8062644d91d_cryptolocker_elex.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-04_74218ce4da58d3cc9b07b8062644d91d_cryptolocker_elex
- Size 52KB
- SHA256 c545ed703b1df632b50d346a3d5f1ece84a31a5c71eadf0e8be940b20cd7a4f0
- MD5 74218ce4da58d3cc9b07b8062644d91d
- SHA1 b55c0c314402a0425bbab4d3ff621c5f227b48ad
- SHA512 f120b9767e3b039f5b91ddd0f4d4eb13b69951a99e1fc2dac3cb9449e16b18c8f39452d8302a53f8c7043920ed7a61d6412b4e95d8cf835a38f7996e14fd9078
- SSDEEP 768:Z6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5aFr7YOzzOQjGL5:Z6QFElP6n+gMQMOtEvwDpjyaYaFAeGL5
- TLSH T1FC332F386FD51A72E377CAB585F682C3B936B8237822990D50CE17414C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE