General
- Target 2026-08-01_8e866bdd8b18d65f0e2b647b6284cd2e_cryptolocker_elex
- Size 41KB
- Sample260802-encpsaszaw
- SHA256 78daf535ed322cea73202f73f1520383a9692765fa6f6c6f966f8489c22a98a6
- MD5 8e866bdd8b18d65f0e2b647b6284cd2e
- SHA1 8b6776b8408d94805e60cc460bd2df0a38328380
- SHA512 86d3de3411e3b7f5b8f62c9805ba5d1ec94fb83617e3960375988220576dba6a4562bc7aff922e5abf6653898071242bd00aba4e48d297127835073862d97d48
- SSDEEP 384:bgM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzorw7SigsXmyuvLVHN4X/xtBB:blo/2n1TCraU6GD1a4XcsSKNuxNwKpK
- TLSH T138134138BEE95972D377C67585F2A1C2B9367C123D02980E55CBA3880D33B5BAC90A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-01_8e866bdd8b18d65f0e2b647b6284cd2e_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_8e866bdd8b18d65f0e2b647b6284cd2e_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_8e866bdd8b18d65f0e2b647b6284cd2e_cryptolocker_elex
- Size 41KB
- SHA256 78daf535ed322cea73202f73f1520383a9692765fa6f6c6f966f8489c22a98a6
- MD5 8e866bdd8b18d65f0e2b647b6284cd2e
- SHA1 8b6776b8408d94805e60cc460bd2df0a38328380
- SHA512 86d3de3411e3b7f5b8f62c9805ba5d1ec94fb83617e3960375988220576dba6a4562bc7aff922e5abf6653898071242bd00aba4e48d297127835073862d97d48
- SSDEEP 384:bgM0V/YPvnr801TRoUGPh4TKt6ATt1DqgPa3s/zzorw7SigsXmyuvLVHN4X/xtBB:blo/2n1TCraU6GD1a4XcsSKNuxNwKpK
- TLSH T138134138BEE95972D377C67585F2A1C2B9367C123D02980E55CBA3880D33B5BAC90A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE