General
- Target 2026-07-22_6b19d964ade95020d04a59acc6b9cf40_cryptolocker_elex
- Size 1.0MB
- Sample260722-v9bydaab38
- SHA256 d4e2d02769e155f69afe622a31d8b5bb6b1969fbacadc4f50006a04538005c48
- MD5 6b19d964ade95020d04a59acc6b9cf40
- SHA1 993fcff84bf245f8dfd3a82f40c75e6c6790694a
- SHA512 b13b376787f9a1cb1482041e35f4b59cc6487f4ce570ce4ee5a89aa29a4e823ec0bebe42f5de5469bd82d5af6cd288e5213a118293f0c629452a10e927709434
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPq0:bGbvflT/ZFIjBzhxwOgXKarY1iBd
- TLSH T1E72509BE74972645FE624C307FECF660DB57287ACB6BDAF24595A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-22_6b19d964ade95020d04a59acc6b9cf40_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_6b19d964ade95020d04a59acc6b9cf40_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_6b19d964ade95020d04a59acc6b9cf40_cryptolocker_elex
- Size 1.0MB
- SHA256 d4e2d02769e155f69afe622a31d8b5bb6b1969fbacadc4f50006a04538005c48
- MD5 6b19d964ade95020d04a59acc6b9cf40
- SHA1 993fcff84bf245f8dfd3a82f40c75e6c6790694a
- SHA512 b13b376787f9a1cb1482041e35f4b59cc6487f4ce570ce4ee5a89aa29a4e823ec0bebe42f5de5469bd82d5af6cd288e5213a118293f0c629452a10e927709434
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPq0:bGbvflT/ZFIjBzhxwOgXKarY1iBd
- TLSH T1E72509BE74972645FE624C307FECF660DB57287ACB6BDAF24595A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE