General
- Target 2026-07-08_10f09f478746ac6413d5edca2c3001a8_cryptolocker_elex_glassworm_njrat
- Size 1.0MB
- Sample260708-dd219aay2k
- SHA256 4ae6363b5a81f16a2028c323a8d3113778c175d8d77e47f24e78ad67240641a8
- MD5 10f09f478746ac6413d5edca2c3001a8
- SHA1 e59dc351138b80b86d490e136ccd89fc922e7619
- SHA512 562dd9996c3252a05b4489eabe6cfdd6ea59f91461d9bac15312568b2265d44d3f376cc0a23d7f60be6778d1ad035dde54ba9d7d501b7362597dfbfbbef92bd7
- SSDEEP 6144:vCjsW4L4IFchOMScD89/drLHgDe7eVvaDtai0qer5+nSNwaJNO8pq6qer5+nnD:7L1MA1Yaamer5+nIwaJNUer5+nD
- TLSH T146351753E7814EDAE7D90576DF14C120932AF12DABFB1230781812C9EE57387BF65A28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-08_10f09f478746ac6413d5edca2c3001a8_cryptolocker_elex_glassworm_njrat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_10f09f478746ac6413d5edca2c3001a8_cryptolocker_elex_glassworm_njrat.exe
Resource
win11ltsc2024-20260706-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_10f09f478746ac6413d5edca2c3001a8_cryptolocker_elex_glassworm_njrat
- Size 1.0MB
- SHA256 4ae6363b5a81f16a2028c323a8d3113778c175d8d77e47f24e78ad67240641a8
- MD5 10f09f478746ac6413d5edca2c3001a8
- SHA1 e59dc351138b80b86d490e136ccd89fc922e7619
- SHA512 562dd9996c3252a05b4489eabe6cfdd6ea59f91461d9bac15312568b2265d44d3f376cc0a23d7f60be6778d1ad035dde54ba9d7d501b7362597dfbfbbef92bd7
- SSDEEP 6144:vCjsW4L4IFchOMScD89/drLHgDe7eVvaDtai0qer5+nSNwaJNO8pq6qer5+nnD:7L1MA1Yaamer5+nIwaJNUer5+nD
- TLSH T146351753E7814EDAE7D90576DF14C120932AF12DABFB1230781812C9EE57387BF65A28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detection of CryptoLocker Variants
- Custom signature
Detection of Cryptolocker Samples
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE