General
- Target 2026-07-02_b6364350e72b2107cb008f0e0e62e885_cryptolocker_elex
- Size 1.0MB
- Sample260702-ch22dahv6k
- SHA256 5829d6a6c45f7b977542aba064c8eaa48776597dbdc0a08d411669c760748e0d
- MD5 b6364350e72b2107cb008f0e0e62e885
- SHA1 1c4bc1389a719197262ab0a801a3e92032d34eb0
- SHA512 fa258843d03d272fdb3cbc64eca6729473cad5c078bf37667e56fb26113d870687e34781ffdece74a42b1f9fe3ec5557538e6750e8074f54b369b06a1ebe8f4e
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPq2:bGbvflT/ZFIjBzhxwOgXKarY1iBr
- TLSH T1EB2519BE74972645FE624C307FECF660DB57287ACB6BDAF24595A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-02_b6364350e72b2107cb008f0e0e62e885_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-02_b6364350e72b2107cb008f0e0e62e885_cryptolocker_elex.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-02_b6364350e72b2107cb008f0e0e62e885_cryptolocker_elex
- Size 1.0MB
- SHA256 5829d6a6c45f7b977542aba064c8eaa48776597dbdc0a08d411669c760748e0d
- MD5 b6364350e72b2107cb008f0e0e62e885
- SHA1 1c4bc1389a719197262ab0a801a3e92032d34eb0
- SHA512 fa258843d03d272fdb3cbc64eca6729473cad5c078bf37667e56fb26113d870687e34781ffdece74a42b1f9fe3ec5557538e6750e8074f54b369b06a1ebe8f4e
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPq2:bGbvflT/ZFIjBzhxwOgXKarY1iBr
- TLSH T1EB2519BE74972645FE624C307FECF660DB57287ACB6BDAF24595A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE