General
- Target 2026-07-08_53ec9511a529f2aa3393ed7b277349ef_cryptolocker_elex
- Size 38KB
- Sample260708-kf3h5aev3j
- SHA256 a3e2e857f563085366c67d22c304f2b9867fcbe3d548b53bf8efc26a8f407c90
- MD5 53ec9511a529f2aa3393ed7b277349ef
- SHA1 2a6d4233db81425f3376dffb098dd450ec7e4d29
- SHA512 8ff59a2d95def8cc0622983b976ba984ca9dc71203e2405e6ac69bde4f17e5e1aa99f06c81a9732caed688cbaff43785d013829fd1c0f5ffd26be62d3bc25be4
- SSDEEP 768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqD:X6QFElP6n+gJQMOtEvwDpjB0m
- TLSH T1F103A3396ED40973E6B79AB189FB85C7B927BD263931590D50CA23014D33B42FEA1D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-08_53ec9511a529f2aa3393ed7b277349ef_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_53ec9511a529f2aa3393ed7b277349ef_cryptolocker_elex.exe
Resource
win11ltsc2024-20260706-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_53ec9511a529f2aa3393ed7b277349ef_cryptolocker_elex
- Size 38KB
- SHA256 a3e2e857f563085366c67d22c304f2b9867fcbe3d548b53bf8efc26a8f407c90
- MD5 53ec9511a529f2aa3393ed7b277349ef
- SHA1 2a6d4233db81425f3376dffb098dd450ec7e4d29
- SHA512 8ff59a2d95def8cc0622983b976ba984ca9dc71203e2405e6ac69bde4f17e5e1aa99f06c81a9732caed688cbaff43785d013829fd1c0f5ffd26be62d3bc25be4
- SSDEEP 768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBaaEqD:X6QFElP6n+gJQMOtEvwDpjB0m
- TLSH T1F103A3396ED40973E6B79AB189FB85C7B927BD263931590D50CA23014D33B42FEA1D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.