General
- Target 2026-08-02_2b9a4a862c65ec29d60eeb92c0b23616_cryptolocker_elex
- Size 72KB
- Sample260802-kw5nesfq5v
- SHA256 ff91fafff850393d3887e93310c5d059cdc6ee61fc0381122ea70f5fe5ca62a3
- MD5 2b9a4a862c65ec29d60eeb92c0b23616
- SHA1 c72cb6c74ff538fd68af22c5b823a5cd8eb3bd8a
- SHA512 1f9e4c0c7ccaa0bbfb94fc75611635cd84f37c3b2a11a5895134c2f8e93e487b580cea35ff428012d92dec756a60d485d403276c022ac1fbd272709ede075d21
- SSDEEP 1536:vj+jsMQMOtEvwDpj5HczerLO04BGc189Y0RxKFgzkzpK:vCjsIOtEvwDpj5HGWY0Rkfk
- TLSH T1E5731E396FD91672E37BDAB5CAF681C6BA75B4223D12980D40CA43450C33F56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-02_2b9a4a862c65ec29d60eeb92c0b23616_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_2b9a4a862c65ec29d60eeb92c0b23616_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_2b9a4a862c65ec29d60eeb92c0b23616_cryptolocker_elex
- Size 72KB
- SHA256 ff91fafff850393d3887e93310c5d059cdc6ee61fc0381122ea70f5fe5ca62a3
- MD5 2b9a4a862c65ec29d60eeb92c0b23616
- SHA1 c72cb6c74ff538fd68af22c5b823a5cd8eb3bd8a
- SHA512 1f9e4c0c7ccaa0bbfb94fc75611635cd84f37c3b2a11a5895134c2f8e93e487b580cea35ff428012d92dec756a60d485d403276c022ac1fbd272709ede075d21
- SSDEEP 1536:vj+jsMQMOtEvwDpj5HczerLO04BGc189Y0RxKFgzkzpK:vCjsIOtEvwDpj5HGWY0Rkfk
- TLSH T1E5731E396FD91672E37BDAB5CAF681C6BA75B4223D12980D40CA43450C33F56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE