General
- Target 2026-07-14_b05493a0b0b1d21d565c384fca1d7e20_cryptolocker_elex
- Size 1.0MB
- Sample260715-ap998aay2s
- SHA256 7147a33271ccf07d207639df8b2a3ba941d521a8d0b07f824c7a14e9f96f1806
- MD5 b05493a0b0b1d21d565c384fca1d7e20
- SHA1 c8af668a0b4c893e6b2605518c12964d5c422449
- SHA512 c8155e7ac22551786398cc192889c0939d2d47b14064ec6552a7ed6894238061e488c0c7b75fa30c2bf32ee60815a9cb389cac255f46f545bca4b8bb8bb4aad5
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPqi:bGbvflT/ZFIjBzhxwOgXKarY1iB3
- TLSH T1B12519BE74972645FE624C307FECF660DB57287ACB6BDAF24595A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-14_b05493a0b0b1d21d565c384fca1d7e20_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_b05493a0b0b1d21d565c384fca1d7e20_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_b05493a0b0b1d21d565c384fca1d7e20_cryptolocker_elex
- Size 1.0MB
- SHA256 7147a33271ccf07d207639df8b2a3ba941d521a8d0b07f824c7a14e9f96f1806
- MD5 b05493a0b0b1d21d565c384fca1d7e20
- SHA1 c8af668a0b4c893e6b2605518c12964d5c422449
- SHA512 c8155e7ac22551786398cc192889c0939d2d47b14064ec6552a7ed6894238061e488c0c7b75fa30c2bf32ee60815a9cb389cac255f46f545bca4b8bb8bb4aad5
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPqi:bGbvflT/ZFIjBzhxwOgXKarY1iB3
- TLSH T1B12519BE74972645FE624C307FECF660DB57287ACB6BDAF24595A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE