General
- Target 2026-07-22_4e2c9110edb0302551b9c1d2742bbf70_cryptolocker_elex_vidar
- Size 76KB
- Sample260723-aaej1asyht
- SHA256 26892ead54f81a791992bb5beb7a84693e33997f0758c07874963ff98e767571
- MD5 4e2c9110edb0302551b9c1d2742bbf70
- SHA1 afefdc7a2954e28e0cb98ed210ecff420f9d4f6a
- SHA512 afb18c8a8587c845d711cc784b63c31997795888ca20aa101789216432f704808fec34f134dc0b5adde97d95193a2f23fdd01c8f452cf4b2889a2514ffeb420e
- SSDEEP 768:bCNQIE0eBhkL2Fo1CCwgfjOgFXifkAeWwQEhFGXkXif4CbPQ7YbO:bCNrC7kYo1FxfFX+zelPX+4CbQ7J
- TLSH T1897300356ED515A2D6778AB48EF2038669347D923B074EBF108B3384C932ED3ACA175D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-22_4e2c9110edb0302551b9c1d2742bbf70_cryptolocker_elex_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_4e2c9110edb0302551b9c1d2742bbf70_cryptolocker_elex_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_4e2c9110edb0302551b9c1d2742bbf70_cryptolocker_elex_vidar
- Size 76KB
- SHA256 26892ead54f81a791992bb5beb7a84693e33997f0758c07874963ff98e767571
- MD5 4e2c9110edb0302551b9c1d2742bbf70
- SHA1 afefdc7a2954e28e0cb98ed210ecff420f9d4f6a
- SHA512 afb18c8a8587c845d711cc784b63c31997795888ca20aa101789216432f704808fec34f134dc0b5adde97d95193a2f23fdd01c8f452cf4b2889a2514ffeb420e
- SSDEEP 768:bCNQIE0eBhkL2Fo1CCwgfjOgFXifkAeWwQEhFGXkXif4CbPQ7YbO:bCNrC7kYo1FxfFX+zelPX+4CbQ7J
- TLSH T1897300356ED515A2D6778AB48EF2038669347D923B074EBF108B3384C932ED3ACA175D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables packed with VMProtect.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE