General
- Target 2026-07-06_e17f90a1e68863ed9667e964a20f9074_cryptolocker_elex
- Size 1.0MB
- Sample260707-aq2dpset6v
- SHA256 c08f53537f182a7050fe568f700db6b6f7bf17fddddc0067bfaaa43de3a6a728
- MD5 e17f90a1e68863ed9667e964a20f9074
- SHA1 bddb827026f6dad7b62e33c697746b6b8dfc4910
- SHA512 88ae2fd69ed83d478c0da7018922896041419916dad3f0e7fceca0ef362cf84a0c22b301d9152f062ec7d5e8f12cea0a081217a1c9509f2e4e77d69267ea212d
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPq3z:bGbvflT/ZFIjBzhxwOgXKarY1iBO
- TLSH T1022519BE74972645FE624C307FECF660DB57287ACB6BDAF24595A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-06_e17f90a1e68863ed9667e964a20f9074_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_e17f90a1e68863ed9667e964a20f9074_cryptolocker_elex.exe
Resource
win11ltsc2024-20260706-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-06_e17f90a1e68863ed9667e964a20f9074_cryptolocker_elex
- Size 1.0MB
- SHA256 c08f53537f182a7050fe568f700db6b6f7bf17fddddc0067bfaaa43de3a6a728
- MD5 e17f90a1e68863ed9667e964a20f9074
- SHA1 bddb827026f6dad7b62e33c697746b6b8dfc4910
- SHA512 88ae2fd69ed83d478c0da7018922896041419916dad3f0e7fceca0ef362cf84a0c22b301d9152f062ec7d5e8f12cea0a081217a1c9509f2e4e77d69267ea212d
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPq3z:bGbvflT/ZFIjBzhxwOgXKarY1iBO
- TLSH T1022519BE74972645FE624C307FECF660DB57287ACB6BDAF24595A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.