General
- Target 2026-07-01_4ec8b207d71d6028c085697d3d6ea15e_cryptolocker_elex
- Size 46KB
- Sample260701-b9cecsd121
- SHA256 f618996cb16356a433b9eefd99cb50bd95ed3e9bcb4e02c596050d2884729270
- MD5 4ec8b207d71d6028c085697d3d6ea15e
- SHA1 93ab095cadb813626be126a210c1fcc044d8d5e5
- SHA512 0f837f4d8d6a410036018fdafd83516aa4d4e436b2e6af7dbf61ee90c65d590d698ea11d6ea80626fd4482538a9b227f77b566e0b2ebd6f7f32e5830e248c0b0
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcJEhw:bgGYcA/53GAGgIvF7ES
- TLSH T1622322387BE52932D37BDFB586F691C6B975B8223D16980D40CA43444C33F66ECA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-01_4ec8b207d71d6028c085697d3d6ea15e_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_4ec8b207d71d6028c085697d3d6ea15e_cryptolocker_elex.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_4ec8b207d71d6028c085697d3d6ea15e_cryptolocker_elex
- Size 46KB
- SHA256 f618996cb16356a433b9eefd99cb50bd95ed3e9bcb4e02c596050d2884729270
- MD5 4ec8b207d71d6028c085697d3d6ea15e
- SHA1 93ab095cadb813626be126a210c1fcc044d8d5e5
- SHA512 0f837f4d8d6a410036018fdafd83516aa4d4e436b2e6af7dbf61ee90c65d590d698ea11d6ea80626fd4482538a9b227f77b566e0b2ebd6f7f32e5830e248c0b0
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcJEhw:bgGYcA/53GAGgIvF7ES
- TLSH T1622322387BE52932D37BDFB586F691C6B975B8223D16980D40CA43444C33F66ECA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.