General
- Target 2026-07-06_cd149b72716520a20119d1c6d3648d22_cryptolocker_elex
- Size 40KB
- Sample260706-hfr2aaez2l
- SHA256 f121d8ce69079f9664e48ed64adbc8755d8c21faf3bd4ecd20193908d7a2ea57
- MD5 cd149b72716520a20119d1c6d3648d22
- SHA1 e5c5e8ad67b91335d8b6bde0c711be312f9a1ba6
- SHA512 23040d7231e844ad480bbde8b2df0515c97ae0ad4746fcbd9a4917de0cf35df4ae08da7f72b2a0df44bf222a40db6bc8561cf9a45f44a426bc454a4a79aa20f2
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCW:bgGYcA/53GAGgIvFP
- TLSH T12C1385387BE62972E37BDFB586F691C67975B8223D16880D44CA53844833F62EC51A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-06_cd149b72716520a20119d1c6d3648d22_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_cd149b72716520a20119d1c6d3648d22_cryptolocker_elex.exe
Resource
win11ltsc2024-20260629-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_cd149b72716520a20119d1c6d3648d22_cryptolocker_elex
- Size 40KB
- SHA256 f121d8ce69079f9664e48ed64adbc8755d8c21faf3bd4ecd20193908d7a2ea57
- MD5 cd149b72716520a20119d1c6d3648d22
- SHA1 e5c5e8ad67b91335d8b6bde0c711be312f9a1ba6
- SHA512 23040d7231e844ad480bbde8b2df0515c97ae0ad4746fcbd9a4917de0cf35df4ae08da7f72b2a0df44bf222a40db6bc8561cf9a45f44a426bc454a4a79aa20f2
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCW:bgGYcA/53GAGgIvFP
- TLSH T12C1385387BE62972E37BDFB586F691C67975B8223D16880D44CA53844833F62EC51A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE