General
- Target 2026-07-06_561bbd396c1ac8a2db9b66add50b85bb_cryptolocker_elex
- Size 1.0MB
- Sample260706-1dhnyahs2m
- SHA256 9e64b342c92a8eff0fb383a1ae1d1874f1a615f733728cca9313fdb4d3a7f6fc
- MD5 561bbd396c1ac8a2db9b66add50b85bb
- SHA1 2f9534cb1af2b91f4c8ce5c3e144717a1f1e294e
- SHA512 101e395058482fdbd63a3c2d66445b50cbecd36ae353c86977775a5227240705a71df31988d961dcda569a55f704362df05b1a177e40935eb0b05ab95182f9f4
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPqK:bGbvflT/ZFIjBzhxwOgXKarY1iB/
- TLSH T1442519BE74972645FE624C307FECF660DB57287ACB6BDAF24595A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-06_561bbd396c1ac8a2db9b66add50b85bb_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_561bbd396c1ac8a2db9b66add50b85bb_cryptolocker_elex.exe
Resource
win11ltsc2024-20260706-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_561bbd396c1ac8a2db9b66add50b85bb_cryptolocker_elex
- Size 1.0MB
- SHA256 9e64b342c92a8eff0fb383a1ae1d1874f1a615f733728cca9313fdb4d3a7f6fc
- MD5 561bbd396c1ac8a2db9b66add50b85bb
- SHA1 2f9534cb1af2b91f4c8ce5c3e144717a1f1e294e
- SHA512 101e395058482fdbd63a3c2d66445b50cbecd36ae353c86977775a5227240705a71df31988d961dcda569a55f704362df05b1a177e40935eb0b05ab95182f9f4
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPqK:bGbvflT/ZFIjBzhxwOgXKarY1iB/
- TLSH T1442519BE74972645FE624C307FECF660DB57287ACB6BDAF24595A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE