General
- Target 2026-07-19_25863025e5e081c6b5632b8c5d004b0e_cryptolocker_elex
- Size 1.0MB
- Sample260719-dvackaax6k
- SHA256 30fd79c030839ea9c23457eb7b099c1639324768eadca009d4d1152af0994751
- MD5 25863025e5e081c6b5632b8c5d004b0e
- SHA1 6a1f5e06d4caf05e20973864014c65488c148d26
- SHA512 f41788ca54afad90ad461413512f01cdf17dde4071d6e21cde5e8a1691fe894bc1ff082ed6e282bc8775c73b308b5c6956652f540e34ae39cd3f6b9ccadf4443
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPqu:bGbvflT/ZFIjBzhxwOgXKarY1iBr
- TLSH T1B82519BE74972645FE624C307FECF660DB57287ACB6BDAF24595A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-19_25863025e5e081c6b5632b8c5d004b0e_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-19_25863025e5e081c6b5632b8c5d004b0e_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-19_25863025e5e081c6b5632b8c5d004b0e_cryptolocker_elex
- Size 1.0MB
- SHA256 30fd79c030839ea9c23457eb7b099c1639324768eadca009d4d1152af0994751
- MD5 25863025e5e081c6b5632b8c5d004b0e
- SHA1 6a1f5e06d4caf05e20973864014c65488c148d26
- SHA512 f41788ca54afad90ad461413512f01cdf17dde4071d6e21cde5e8a1691fe894bc1ff082ed6e282bc8775c73b308b5c6956652f540e34ae39cd3f6b9ccadf4443
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPqu:bGbvflT/ZFIjBzhxwOgXKarY1iBr
- TLSH T1B82519BE74972645FE624C307FECF660DB57287ACB6BDAF24595A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE