General
- Target 2026-07-20_28bd16d21cd96576249bf65be7700dd8_cryptolocker_elex
- Size 42KB
- Sample260720-n4physhs2l
- SHA256 158ffd68afcfb1b664d8c84ec28fd09242763a112425f887d138adf186d2ad55
- MD5 28bd16d21cd96576249bf65be7700dd8
- SHA1 2aed5d61185966aa4cd07c66bf392013be296f01
- SHA512 7191e66b3af4b1c02d18e4c6ff04e57336122701bb4fa9c714daa6a042a50367205837b7d1993daa73a8c0694dcc47d54ddd3cc7ae8c22eef0eedfbb6b1ade98
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCM:bgGYcA/53GAGgIvFJ
- TLSH T16F1375387FE62972E37BDFB586F691C67935B8223D16880D40CA53844833F65EC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-20_28bd16d21cd96576249bf65be7700dd8_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-20_28bd16d21cd96576249bf65be7700dd8_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-20_28bd16d21cd96576249bf65be7700dd8_cryptolocker_elex
- Size 42KB
- SHA256 158ffd68afcfb1b664d8c84ec28fd09242763a112425f887d138adf186d2ad55
- MD5 28bd16d21cd96576249bf65be7700dd8
- SHA1 2aed5d61185966aa4cd07c66bf392013be296f01
- SHA512 7191e66b3af4b1c02d18e4c6ff04e57336122701bb4fa9c714daa6a042a50367205837b7d1993daa73a8c0694dcc47d54ddd3cc7ae8c22eef0eedfbb6b1ade98
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCM:bgGYcA/53GAGgIvFJ
- TLSH T16F1375387FE62972E37BDFB586F691C67935B8223D16880D40CA53844833F65EC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE