General
- Target 2026-07-12_30f32b6199a29022d0f317f22573f976_cryptolocker_elex
- Size 85KB
- Sample260712-lrpl3shx6w
- SHA256 478b9123077151d06f4ad0007d73f7d32257ad8997bba15758cb071882caa38e
- MD5 30f32b6199a29022d0f317f22573f976
- SHA1 e44dfcea0cd36b5df03c1b3cecf8d106dd625c91
- SHA512 daa7c724dd75a3eb0667c28695869c2ee12869587d55fe239a45490141ddefd445fb7b6b69cce729ecbb05f5affdad5563b51c306f68c894a1b58e94bf9a6ba9
- SSDEEP 1536:Z6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMn:Z6a+pOtEvwDpjtz0
- TLSH T1F983F9326EC50D73D5B387B1C9FB86B36412BD663731458F6489FB018E33686AA61D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-12_30f32b6199a29022d0f317f22573f976_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_30f32b6199a29022d0f317f22573f976_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_30f32b6199a29022d0f317f22573f976_cryptolocker_elex
- Size 85KB
- SHA256 478b9123077151d06f4ad0007d73f7d32257ad8997bba15758cb071882caa38e
- MD5 30f32b6199a29022d0f317f22573f976
- SHA1 e44dfcea0cd36b5df03c1b3cecf8d106dd625c91
- SHA512 daa7c724dd75a3eb0667c28695869c2ee12869587d55fe239a45490141ddefd445fb7b6b69cce729ecbb05f5affdad5563b51c306f68c894a1b58e94bf9a6ba9
- SSDEEP 1536:Z6QFElP6n+gMQMOtEvwDpjQGYQbN/PKwMn:Z6a+pOtEvwDpjtz0
- TLSH T1F983F9326EC50D73D5B387B1C9FB86B36412BD663731458F6489FB018E33686AA61D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE