General
- Target 2026-07-23_6328b97741fef632ab1235c7002bf6cf_cryptolocker_elex
- Size 63KB
- Sample260723-hrha8atane
- SHA256 02491e11d596a23e7c3bf75a079750ee9f22ea55d36d40863651a4ca2b99b222
- MD5 6328b97741fef632ab1235c7002bf6cf
- SHA1 add11e1a63ffda1e2f3a28c0758d49e6ca2149f4
- SHA512 1b1f26918dc2f09bf91f74d31d22b4796b68f67c6edecae8bce7b0d5c2aadce1c28469d1f1418676daab30038cd202292dd387347140adc1d4de117d8a6cac4b
- SSDEEP 768:bio/2n1TCraU6GD1a4XlVD30OgfjcmWcO+wMVm+slAMvcWu/mvx:bd/y2l7L4F0+B2o/+
- TLSH T16653533CBFD51A72D377C6B585F6A1C2FA39B81239029C0D50DB53880933F56ADA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-23_6328b97741fef632ab1235c7002bf6cf_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_6328b97741fef632ab1235c7002bf6cf_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_6328b97741fef632ab1235c7002bf6cf_cryptolocker_elex
- Size 63KB
- SHA256 02491e11d596a23e7c3bf75a079750ee9f22ea55d36d40863651a4ca2b99b222
- MD5 6328b97741fef632ab1235c7002bf6cf
- SHA1 add11e1a63ffda1e2f3a28c0758d49e6ca2149f4
- SHA512 1b1f26918dc2f09bf91f74d31d22b4796b68f67c6edecae8bce7b0d5c2aadce1c28469d1f1418676daab30038cd202292dd387347140adc1d4de117d8a6cac4b
- SSDEEP 768:bio/2n1TCraU6GD1a4XlVD30OgfjcmWcO+wMVm+slAMvcWu/mvx:bd/y2l7L4F0+B2o/+
- TLSH T16653533CBFD51A72D377C6B585F6A1C2FA39B81239029C0D50DB53880933F56ADA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE