General
- Target 2026-07-01_4976c0233ea78d03aaf875ab5486f0f8_cryptolocker_elex
- Size 40KB
- Sample260701-n8cd7adt3l
- SHA256 0cc7bfdc2a13deceb59ed4e310c3c19c2edafab42d28826ddd3fd7d169032361
- MD5 4976c0233ea78d03aaf875ab5486f0f8
- SHA1 66fc2dcbb8ef3cee862441161fa09f2c76db1c07
- SHA512 1edc50c1aa14ed8d3e7fd5613706a67149a88ec670107823fd5f176b1a67d5c6fc0792c77facaf93c694e2c4b8a1b2eeaa55c2a983d0b3a64a5c9f7786c92997
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCl:bgGYcA/53GAGgIvFA
- TLSH T15C0385387FE62972D37BDFB586F691C67975B8223D16880D44CA53844833F62EC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-01_4976c0233ea78d03aaf875ab5486f0f8_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-01_4976c0233ea78d03aaf875ab5486f0f8_cryptolocker_elex.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-01_4976c0233ea78d03aaf875ab5486f0f8_cryptolocker_elex
- Size 40KB
- SHA256 0cc7bfdc2a13deceb59ed4e310c3c19c2edafab42d28826ddd3fd7d169032361
- MD5 4976c0233ea78d03aaf875ab5486f0f8
- SHA1 66fc2dcbb8ef3cee862441161fa09f2c76db1c07
- SHA512 1edc50c1aa14ed8d3e7fd5613706a67149a88ec670107823fd5f176b1a67d5c6fc0792c77facaf93c694e2c4b8a1b2eeaa55c2a983d0b3a64a5c9f7786c92997
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCl:bgGYcA/53GAGgIvFA
- TLSH T15C0385387FE62972D37BDFB586F691C67975B8223D16880D44CA53844833F62EC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE