General
- Target 2026-07-29_ae583d64d0dc9f7b1d9db2f026404126_cryptolocker_elex
- Size 49KB
- Sample260729-j4e73ack6x
- SHA256 28583e32ebe9823db93cf14770aec80e3fd9f518c9656a64d5436659c1e25bd6
- MD5 ae583d64d0dc9f7b1d9db2f026404126
- SHA1 6bda3a8a7be2c7f55ac36821b49d5bff1e73b71c
- SHA512 8c173a889d7732ff537e3ba1039c896322455272d50816f4adf0c80c7e356fc891bdc1051a45a2873797b7a35e5c3a2f931c361b0b3b9d39617ad6218633d845
- SSDEEP 768:l6LsoVEeegiZPvEhHSP+gDYQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITOc:l6Q0ElP6G+gMQMOtEvwDpjgWMl7TZ
- TLSH T1523322742AD53D72D7779AF6C9FA41B3A536B812A821951C50FAD30CC833B51E8E0E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-29_ae583d64d0dc9f7b1d9db2f026404126_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_ae583d64d0dc9f7b1d9db2f026404126_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_ae583d64d0dc9f7b1d9db2f026404126_cryptolocker_elex
- Size 49KB
- SHA256 28583e32ebe9823db93cf14770aec80e3fd9f518c9656a64d5436659c1e25bd6
- MD5 ae583d64d0dc9f7b1d9db2f026404126
- SHA1 6bda3a8a7be2c7f55ac36821b49d5bff1e73b71c
- SHA512 8c173a889d7732ff537e3ba1039c896322455272d50816f4adf0c80c7e356fc891bdc1051a45a2873797b7a35e5c3a2f931c361b0b3b9d39617ad6218633d845
- SSDEEP 768:l6LsoVEeegiZPvEhHSP+gDYQtOOtEvwDpjtMLZdzuqpXsiE8Wq/DpkITOc:l6Q0ElP6G+gMQMOtEvwDpjgWMl7TZ
- TLSH T1523322742AD53D72D7779AF6C9FA41B3A536B812A821951C50FAD30CC833B51E8E0E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE