General
- Target 2026-06-28_f328c0f505493dee0be2acb7dc5c0c4a_cryptolocker_elex
- Size 89KB
- Sample260628-wkpzdaay4v
- SHA256 79ff41d296669c0b7cb7ac203bbfdb0ac58c009aa2a52924aefb23bde135fe8d
- MD5 f328c0f505493dee0be2acb7dc5c0c4a
- SHA1 c7932eb455321093d876267ff8754a448f5f3659
- SHA512 e005b38b4eec82cefdef5c5a1b0a8f9a367e4afc3ab0724df13eda03826c87ecb0f346b6859ee6e270324778dc452bc60e84e9560ad4a3613e3c62a1822ef376
- SSDEEP 768:dUz7yVEhs9+OyqZQtOOtEvwDpjm9+4U9HueDgaRWDCSMzTs9AIIywXAte:dP+OyWQMOtEvwDpjwH8u8rZVTs9AQe
- TLSH T13A93A8274EC42665F633C7764AFEB2B165207C927901F5DC399AFE7C4533A23A850A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-06-28_f328c0f505493dee0be2acb7dc5c0c4a_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-28_f328c0f505493dee0be2acb7dc5c0c4a_cryptolocker_elex.exe
Resource
win11ltsc2024-20260617-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-28_f328c0f505493dee0be2acb7dc5c0c4a_cryptolocker_elex
- Size 89KB
- SHA256 79ff41d296669c0b7cb7ac203bbfdb0ac58c009aa2a52924aefb23bde135fe8d
- MD5 f328c0f505493dee0be2acb7dc5c0c4a
- SHA1 c7932eb455321093d876267ff8754a448f5f3659
- SHA512 e005b38b4eec82cefdef5c5a1b0a8f9a367e4afc3ab0724df13eda03826c87ecb0f346b6859ee6e270324778dc452bc60e84e9560ad4a3613e3c62a1822ef376
- SSDEEP 768:dUz7yVEhs9+OyqZQtOOtEvwDpjm9+4U9HueDgaRWDCSMzTs9AIIywXAte:dP+OyWQMOtEvwDpjwH8u8rZVTs9AQe
- TLSH T13A93A8274EC42665F633C7764AFEB2B165207C927901F5DC399AFE7C4533A23A850A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE