General
- Target 2026-07-12_4cf5079233dd481c6c9d370770f700b3_cryptolocker_elex
- Size 44KB
- Sample260712-qllqfsaw4l
- SHA256 b32268f2ca4ec9dc0613037c6962f850574689d2a11c691f2773abcf36cebc74
- MD5 4cf5079233dd481c6c9d370770f700b3
- SHA1 c2a84eedae945df4c7105b609f50d9f39d39dbd8
- SHA512 dfc4c898d83657c6b191184e9bd12474fe1936d4e8651d8a215528d0883c6ffa16046b8dff688f11d75389f6d8c04d50ba40a24626b66567dfe59675ee3a5ad6
- SSDEEP 768:bvvJCYOOvbRPDF7X3tEshLg4ZWEZmrCDHCxNsMZbVrdW:bvvJCF+RJ7NC2DHCxrxVxW
- TLSH T16D234967BBC51F61C14302F1196BE1817B2BBE34223A95BD7C5DB31D13B3E28A972A50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-12_4cf5079233dd481c6c9d370770f700b3_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_4cf5079233dd481c6c9d370770f700b3_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_4cf5079233dd481c6c9d370770f700b3_cryptolocker_elex
- Size 44KB
- SHA256 b32268f2ca4ec9dc0613037c6962f850574689d2a11c691f2773abcf36cebc74
- MD5 4cf5079233dd481c6c9d370770f700b3
- SHA1 c2a84eedae945df4c7105b609f50d9f39d39dbd8
- SHA512 dfc4c898d83657c6b191184e9bd12474fe1936d4e8651d8a215528d0883c6ffa16046b8dff688f11d75389f6d8c04d50ba40a24626b66567dfe59675ee3a5ad6
- SSDEEP 768:bvvJCYOOvbRPDF7X3tEshLg4ZWEZmrCDHCxNsMZbVrdW:bvvJCF+RJ7NC2DHCxrxVxW
- TLSH T16D234967BBC51F61C14302F1196BE1817B2BBE34223A95BD7C5DB31D13B3E28A972A50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10- Custom signature
Detection of CryptoLocker Variants
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE