General
- Target 2026-07-08_5631887b00bbeba7ed57bf73145a2a63_elex_virlock
- Size 1.7MB
- Sample260709-a652tsbs3l
- SHA256 6690f1ab060ec5a2f847ab3c3be28f2938e6159cd818595164e7c36eb8015fa4
- MD5 5631887b00bbeba7ed57bf73145a2a63
- SHA1 692b7ace7a58a73813740dc75bfa7121dda2b342
- SHA512 6aba48f45e1719b2c0d06716f88fbf2c58bba50a8f6e7937e8195221793cc9e8b0d1b0ae9a3544e5e1b42f085d93886577957389e9b668fc13c82a287d8a46e8
- SSDEEP 24576:Dp86t10pfItNRjPZ4wEo9qP+8IbJVNFg3WTcv1pG/y:N86tGtItbGw2P+vbU1ph
- TLSH T199859886938FE534B1F9E7A064354BF98B904A61F90F453894EA2F1D1FF6E247160E23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-08_5631887b00bbeba7ed57bf73145a2a63_elex_virlock.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-08_5631887b00bbeba7ed57bf73145a2a63_elex_virlock.exe
Resource
win11ltsc2024-20260706-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-08_5631887b00bbeba7ed57bf73145a2a63_elex_virlock
- Size 1.7MB
- SHA256 6690f1ab060ec5a2f847ab3c3be28f2938e6159cd818595164e7c36eb8015fa4
- MD5 5631887b00bbeba7ed57bf73145a2a63
- SHA1 692b7ace7a58a73813740dc75bfa7121dda2b342
- SHA512 6aba48f45e1719b2c0d06716f88fbf2c58bba50a8f6e7937e8195221793cc9e8b0d1b0ae9a3544e5e1b42f085d93886577957389e9b668fc13c82a287d8a46e8
- SSDEEP 24576:Dp86t10pfItNRjPZ4wEo9qP+8IbJVNFg3WTcv1pG/y:N86tGtItbGw2P+vbU1ph
- TLSH T199859886938FE534B1F9E7A064354BF98B904A61F90F453894EA2F1D1FF6E247160E23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.