General
- Target 2026-08-01_ae1313186604d289578ef698d0309fc1_cryptolocker_elex
- Size 56KB
- Sample260802-abvbvazvf1
- SHA256 354b74fe489ae789dc3d8bdfd9f6f4c15fa6476ae19f09c08114faca56e1d1eb
- MD5 ae1313186604d289578ef698d0309fc1
- SHA1 875f6923e07d1429d85b8a826ce7424af7a8c962
- SHA512 cd74831136e19ad65f2c31dc3b76ad451b7b1ebd54eafcccf20f03b0777483d10b2a0c4e310ae03367db0e58409db36c52e5e1b9a4919445d6e822e5b35529d6
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpPFPW45:b7/y28wZEjbnouy8G76iH/NLpQ45
- TLSH T13B439439BBE859B2D3BB857594F3B0C6BD36B81239019C0E55CB63880D33B5ABD9061D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-01_ae1313186604d289578ef698d0309fc1_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_ae1313186604d289578ef698d0309fc1_cryptolocker_elex
- Size 56KB
- SHA256 354b74fe489ae789dc3d8bdfd9f6f4c15fa6476ae19f09c08114faca56e1d1eb
- MD5 ae1313186604d289578ef698d0309fc1
- SHA1 875f6923e07d1429d85b8a826ce7424af7a8c962
- SHA512 cd74831136e19ad65f2c31dc3b76ad451b7b1ebd54eafcccf20f03b0777483d10b2a0c4e310ae03367db0e58409db36c52e5e1b9a4919445d6e822e5b35529d6
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpPFPW45:b7/y28wZEjbnouy8G76iH/NLpQ45
- TLSH T13B439439BBE859B2D3BB857594F3B0C6BD36B81239019C0E55CB63880D33B5ABD9061D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE