General
- Target 2026-07-22_0a4ec5d2d0add98acc96b7f40c728f4d_cryptolocker_elex
- Size 60KB
- Sample260723-cftl8afb79
- SHA256 98a2eace7f5026876b9d8b295f73d6e752afd8ee10ceef766695c0ccfd974385
- MD5 0a4ec5d2d0add98acc96b7f40c728f4d
- SHA1 c771ab687c0fe6b5d79c00d868173e08b7652916
- SHA512 5efc00d6ea1a55fecddc58405e6f09e33f7511c109e8cb1b3372b8e27450f49a19b5af9ff1d10952337aa748275108a951f4ad54a031bffbab512fc784a06f86
- SSDEEP 1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLY8CtemZ:X6a+SOtEvwDpjBrO2
- TLSH T12053EC385ED51A72E3B7DAB6C9F685C3B936B8237922990D40CF13410C23B56EDA1D1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-22_0a4ec5d2d0add98acc96b7f40c728f4d_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-22_0a4ec5d2d0add98acc96b7f40c728f4d_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-22_0a4ec5d2d0add98acc96b7f40c728f4d_cryptolocker_elex
- Size 60KB
- SHA256 98a2eace7f5026876b9d8b295f73d6e752afd8ee10ceef766695c0ccfd974385
- MD5 0a4ec5d2d0add98acc96b7f40c728f4d
- SHA1 c771ab687c0fe6b5d79c00d868173e08b7652916
- SHA512 5efc00d6ea1a55fecddc58405e6f09e33f7511c109e8cb1b3372b8e27450f49a19b5af9ff1d10952337aa748275108a951f4ad54a031bffbab512fc784a06f86
- SSDEEP 1536:X6QFElP6n+gJQMOtEvwDpjBccD2RuoNmuBLY8CtemZ:X6a+SOtEvwDpjBrO2
- TLSH T12053EC385ED51A72E3B7DAB6C9F685C3B936B8237922990D40CF13410C23B56EDA1D1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE