General
- Target 2026-07-04_ac1506a1c6850ffd859cec4361576e62_cryptolocker_elex
- Size 50KB
- Sample260704-en442aax71
- SHA256 ba231d1df34233127fb1fec2e3b6d96e85be4d1fd4d5abad377f528dd6785aab
- MD5 ac1506a1c6850ffd859cec4361576e62
- SHA1 ba72f2f194fe3fd0216f9c80397b5d924a6be228
- SHA512 e0215b142c4c9ebd3d53c537f989e0c0c9b88b994e53ae3b5209d8ac1b3600828cc28b4172dc12a6681978def5174ca2cff6cf70bed75e691ffe244fd048650b
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXZwkX76:bgGYcA/53GAGgIvFbi
- TLSH T1C83331387FE62972E37BDFB586F651C6B93578223D16980D40CA43844833F66DCA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-04_ac1506a1c6850ffd859cec4361576e62_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-04_ac1506a1c6850ffd859cec4361576e62_cryptolocker_elex.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-04_ac1506a1c6850ffd859cec4361576e62_cryptolocker_elex
- Size 50KB
- SHA256 ba231d1df34233127fb1fec2e3b6d96e85be4d1fd4d5abad377f528dd6785aab
- MD5 ac1506a1c6850ffd859cec4361576e62
- SHA1 ba72f2f194fe3fd0216f9c80397b5d924a6be228
- SHA512 e0215b142c4c9ebd3d53c537f989e0c0c9b88b994e53ae3b5209d8ac1b3600828cc28b4172dc12a6681978def5174ca2cff6cf70bed75e691ffe244fd048650b
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXZwkX76:bgGYcA/53GAGgIvFbi
- TLSH T1C83331387FE62972E37BDFB586F651C6B93578223D16980D40CA43844833F66DCA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE