General
- Target 2026-07-31_5b22b802bd148f45af93ced3bbb5e5f6_cryptolocker_elex
- Size 50KB
- Sample260731-ghjbgsvfph
- SHA256 736726877dba592b582f705da02e9ac06013038cedd7b42f32b4ebaf53a7e454
- MD5 5b22b802bd148f45af93ced3bbb5e5f6
- SHA1 950cc82974c7e582f8d136892b3f17850d594056
- SHA512 ead94ef3b5bd272d3502e9056608190999642cb6db7ac3160a96ecb1e0314c3421609fff64ba319bf14bde250abd2180bcc59dc995372c47c25b9e419fc20046
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXZwkX5R:bgGYcA/53GAGgIvFb1R
- TLSH T1823322387FE52972E37BDFB586F691C6B93578223D16980D40CA43844833F66DCA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-07-31_5b22b802bd148f45af93ced3bbb5e5f6_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-31_5b22b802bd148f45af93ced3bbb5e5f6_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-31_5b22b802bd148f45af93ced3bbb5e5f6_cryptolocker_elex
- Size 50KB
- SHA256 736726877dba592b582f705da02e9ac06013038cedd7b42f32b4ebaf53a7e454
- MD5 5b22b802bd148f45af93ced3bbb5e5f6
- SHA1 950cc82974c7e582f8d136892b3f17850d594056
- SHA512 ead94ef3b5bd272d3502e9056608190999642cb6db7ac3160a96ecb1e0314c3421609fff64ba319bf14bde250abd2180bcc59dc995372c47c25b9e419fc20046
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXZwkX5R:bgGYcA/53GAGgIvFb1R
- TLSH T1823322387FE52972E37BDFB586F691C6B93578223D16980D40CA43844833F66DCA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE