General
- Target 2026-07-23_db345a131f8d66f511685875b2f9330e_cryptolocker_elex
- Size 51KB
- Sample260723-yet29awbka
- SHA256 d719e420e86706df9ebfbe981646fd1f13c20494abf7c5f0e9cc1b67534356b1
- MD5 db345a131f8d66f511685875b2f9330e
- SHA1 012f046e7009efb431932c756d5110df732e9aa4
- SHA512 662cfa0060642cda5d756d1eeb38b1b406bef4a9957eabb12105908fe20d3c33bfa1d58251567088739aaa1aa8825b97e76a5262967915d1634d558425307d4b
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXQ1J1ycvZ:bgGYcA/53GAGgIvFW17JZ
- TLSH T1723322387FE52932E37BDFB586F691C6B935B8223D16980D40DA43844833F65DCA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-23_db345a131f8d66f511685875b2f9330e_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-23_db345a131f8d66f511685875b2f9330e_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-23_db345a131f8d66f511685875b2f9330e_cryptolocker_elex
- Size 51KB
- SHA256 d719e420e86706df9ebfbe981646fd1f13c20494abf7c5f0e9cc1b67534356b1
- MD5 db345a131f8d66f511685875b2f9330e
- SHA1 012f046e7009efb431932c756d5110df732e9aa4
- SHA512 662cfa0060642cda5d756d1eeb38b1b406bef4a9957eabb12105908fe20d3c33bfa1d58251567088739aaa1aa8825b97e76a5262967915d1634d558425307d4b
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXQ1J1ycvZ:bgGYcA/53GAGgIvFW17JZ
- TLSH T1723322387FE52932E37BDFB586F691C6B935B8223D16980D40DA43844833F65DCA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE