General
- Target 2026-08-02_517440c72c9162c2f2b54aca1463a636_cryptolocker_elex
- Size 51KB
- Sample260802-kmltysfn7y
- SHA256 d5a7fe74a6344334bfaca39d20a4a1df094bd84e30fe446f270cbaf82bbb1f1f
- MD5 517440c72c9162c2f2b54aca1463a636
- SHA1 a6fe1204a3096d6d55578affb853f5211fe7b559
- SHA512 e289a6d8add03f5295c117a5179bd2eb82accaebab211a58fbd23ad8835ace3e2ea506cd2d1edabd5cc71507a618cbe0423fc0fda0f26f2baa300181bfbefc1d
- SSDEEP 768:qao/2n1TCraU6GD1a4Xcn62y7Q/bqK7gmD:qF/y2lm6o2KT
- TLSH T1F233DC3C6EE95972D37BCAB585F2A1C6B93578123D029C0E51CB63840C33F57ADA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-02_517440c72c9162c2f2b54aca1463a636_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_517440c72c9162c2f2b54aca1463a636_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_517440c72c9162c2f2b54aca1463a636_cryptolocker_elex
- Size 51KB
- SHA256 d5a7fe74a6344334bfaca39d20a4a1df094bd84e30fe446f270cbaf82bbb1f1f
- MD5 517440c72c9162c2f2b54aca1463a636
- SHA1 a6fe1204a3096d6d55578affb853f5211fe7b559
- SHA512 e289a6d8add03f5295c117a5179bd2eb82accaebab211a58fbd23ad8835ace3e2ea506cd2d1edabd5cc71507a618cbe0423fc0fda0f26f2baa300181bfbefc1d
- SSDEEP 768:qao/2n1TCraU6GD1a4Xcn62y7Q/bqK7gmD:qF/y2lm6o2KT
- TLSH T1F233DC3C6EE95972D37BCAB585F2A1C6B93578123D029C0E51CB63840C33F57ADA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE