General
- Target 2026-07-22_4808e1f09121d5338c5d8bfb5f7b8be5_cryptolocker_elex_vidar
- Size 76KB
- Sample260723-ca4v1azale
- SHA256 c265dd801c799ab36dc5326a8ed6aefad83b5c4e33a57bbd8da099466cba9c19
- MD5 4808e1f09121d5338c5d8bfb5f7b8be5
- SHA1 9bbed3d5e3d1a74f72ac7e501260cbda7e6ed40b
- SHA512 c0d78abe26400632de8b94271f352cfee6e231e63c6e61107b13d86d26c764797950d9f9a1139d38068d3f9fc103ce9e4d614c1f2f3ee307621477211011b82a
- SSDEEP 768:bCNQIE0eBhkL2Fo1CCwgfjOgFXifkAeWwQEhFGXkXif4CbPQ7Ybt:bCNrC7kYo1FxfFX+zelPX+4CbQ7K
- TLSH T12B7310356ED515A2D6778AB48EF2038669347D923B074EBF108B3384C932ED3ACA175D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-22_4808e1f09121d5338c5d8bfb5f7b8be5_cryptolocker_elex_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_4808e1f09121d5338c5d8bfb5f7b8be5_cryptolocker_elex_vidar.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_4808e1f09121d5338c5d8bfb5f7b8be5_cryptolocker_elex_vidar
- Size 76KB
- SHA256 c265dd801c799ab36dc5326a8ed6aefad83b5c4e33a57bbd8da099466cba9c19
- MD5 4808e1f09121d5338c5d8bfb5f7b8be5
- SHA1 9bbed3d5e3d1a74f72ac7e501260cbda7e6ed40b
- SHA512 c0d78abe26400632de8b94271f352cfee6e231e63c6e61107b13d86d26c764797950d9f9a1139d38068d3f9fc103ce9e4d614c1f2f3ee307621477211011b82a
- SSDEEP 768:bCNQIE0eBhkL2Fo1CCwgfjOgFXifkAeWwQEhFGXkXif4CbPQ7Ybt:bCNrC7kYo1FxfFX+zelPX+4CbQ7K
- TLSH T12B7310356ED515A2D6778AB48EF2038669347D923B074EBF108B3384C932ED3ACA175D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables packed with VMProtect.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE