General
- Target 2026-07-12_41d19c9d0facee5daa2c96949546465c_cryptolocker_elex
- Size 1.0MB
- Sample260712-qsj57scx9t
- SHA256 e97857f8b7984fd2f77c327bfc5379370048ad0457e251cb12064578389a7b87
- MD5 41d19c9d0facee5daa2c96949546465c
- SHA1 06b9fb8bc3d9dbecb88373f45decca6b7abdaeb2
- SHA512 5095b804cba09ea78355899c1332ab4e0c0a2213d7480d7a35e59f77c5e535a5b286b7a0b20795ccd54125c1f387525d720ccbcebdb76618245e6ed4fc565c35
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPqq:bGbvflT/ZFIjBzhxwOgXKarY1iBv
- TLSH T14C2519BE74972645FE624C307FECF660DB57287ACB6BDAF24595A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-12_41d19c9d0facee5daa2c96949546465c_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_41d19c9d0facee5daa2c96949546465c_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_41d19c9d0facee5daa2c96949546465c_cryptolocker_elex
- Size 1.0MB
- SHA256 e97857f8b7984fd2f77c327bfc5379370048ad0457e251cb12064578389a7b87
- MD5 41d19c9d0facee5daa2c96949546465c
- SHA1 06b9fb8bc3d9dbecb88373f45decca6b7abdaeb2
- SHA512 5095b804cba09ea78355899c1332ab4e0c0a2213d7480d7a35e59f77c5e535a5b286b7a0b20795ccd54125c1f387525d720ccbcebdb76618245e6ed4fc565c35
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPqq:bGbvflT/ZFIjBzhxwOgXKarY1iBv
- TLSH T14C2519BE74972645FE624C307FECF660DB57287ACB6BDAF24595A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE