General
- Target 2026-07-17_db3e187cba7a05f6b0e0da0ce1c1c699_cryptolocker_elex
- Size 55KB
- Sample260717-mrk5bshs3n
- SHA256 a9819cf0bad61ba5e3235f990f5d0c165d7ba2efc6597ae6f12bc9b5f4c047b8
- MD5 db3e187cba7a05f6b0e0da0ce1c1c699
- SHA1 e197455c610c0bed550cdbbe2e8566b2547e51c6
- SHA512 355f6635f3cc4a59ddd725f31cced0f086d02d32b06519bdac8e4cb069806214965362ac0c6476f4d5cac50dbd9e6d464d5bef016e1d09b65e6e6d573b02f9e3
- SSDEEP 1536:Z6QFElP6n+gMQMOtEvwDpjyaYaFAeG/Y8B:Z6a+pOtEvwDpjv9W
- TLSH T19F430F386FD51A72E377CAB585F682C3B936B8227C22990D50CE17414C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-17_db3e187cba7a05f6b0e0da0ce1c1c699_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_db3e187cba7a05f6b0e0da0ce1c1c699_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_db3e187cba7a05f6b0e0da0ce1c1c699_cryptolocker_elex
- Size 55KB
- SHA256 a9819cf0bad61ba5e3235f990f5d0c165d7ba2efc6597ae6f12bc9b5f4c047b8
- MD5 db3e187cba7a05f6b0e0da0ce1c1c699
- SHA1 e197455c610c0bed550cdbbe2e8566b2547e51c6
- SHA512 355f6635f3cc4a59ddd725f31cced0f086d02d32b06519bdac8e4cb069806214965362ac0c6476f4d5cac50dbd9e6d464d5bef016e1d09b65e6e6d573b02f9e3
- SSDEEP 1536:Z6QFElP6n+gMQMOtEvwDpjyaYaFAeG/Y8B:Z6a+pOtEvwDpjv9W
- TLSH T19F430F386FD51A72E377CAB585F682C3B936B8227C22990D50CE17414C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE