General
- Target 2026-07-16_f9b6312c616f7c5764e7d154e86581da_cryptolocker_elex
- Size 38KB
- Sample260716-186dgsfs2j
- SHA256 a36c9429c30b13e236494f2ed435d7170bd12f7260fea6d9e56601c7c331a65d
- MD5 f9b6312c616f7c5764e7d154e86581da
- SHA1 f3eb139a91fddedb4e4b11b8cf11db58ac9a2838
- SHA512 9307fb5fcbbb029316297cd5247708292aa7329a973986a354a96984e5c8e71e971284c4ea51fc08e8e8ab548915ae2e212d9b4702893a6cfb60dcb6a5a52d58
- SSDEEP 768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNf2VlUt:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xm
- TLSH T1C00353326FD515E1E7779A73F9F791C2E926BC262C22850D008A7F4409F3A91EDA1D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-16_f9b6312c616f7c5764e7d154e86581da_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-16_f9b6312c616f7c5764e7d154e86581da_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-16_f9b6312c616f7c5764e7d154e86581da_cryptolocker_elex
- Size 38KB
- SHA256 a36c9429c30b13e236494f2ed435d7170bd12f7260fea6d9e56601c7c331a65d
- MD5 f9b6312c616f7c5764e7d154e86581da
- SHA1 f3eb139a91fddedb4e4b11b8cf11db58ac9a2838
- SHA512 9307fb5fcbbb029316297cd5247708292aa7329a973986a354a96984e5c8e71e971284c4ea51fc08e8e8ab548915ae2e212d9b4702893a6cfb60dcb6a5a52d58
- SSDEEP 768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNf2VlUt:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xm
- TLSH T1C00353326FD515E1E7779A73F9F791C2E926BC262C22850D008A7F4409F3A91EDA1D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE