General
- Target 2026-08-02_89b155f3756d1c49209ec91188347b66_cryptolocker_elex
- Size 55KB
- Sample260802-rd9yravand
- SHA256 ac0e4ae200de6604f16262ff47ba665b7a11351d12e54d072ddbf74091d2722b
- MD5 89b155f3756d1c49209ec91188347b66
- SHA1 7dc8c83b7fe9d8ab80fef0e510e343ec95d5ec61
- SHA512 89ec4a790aeab0837f9b98544d01664775b4990ae506bca6b78a95f5a949d51474001a4acd32648acc246ff8c3afb8561c4b5678c39b16fa94e661be36692116
- SSDEEP 1536:Z6QFElP6n+gMQMOtEvwDpjyaYaFAeG/Y8K:Z6a+pOtEvwDpjv91
- TLSH T18C430F386FD51A72E377CAB585F682C3B936B8227C22990D50CE17450C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-02_89b155f3756d1c49209ec91188347b66_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_89b155f3756d1c49209ec91188347b66_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_89b155f3756d1c49209ec91188347b66_cryptolocker_elex
- Size 55KB
- SHA256 ac0e4ae200de6604f16262ff47ba665b7a11351d12e54d072ddbf74091d2722b
- MD5 89b155f3756d1c49209ec91188347b66
- SHA1 7dc8c83b7fe9d8ab80fef0e510e343ec95d5ec61
- SHA512 89ec4a790aeab0837f9b98544d01664775b4990ae506bca6b78a95f5a949d51474001a4acd32648acc246ff8c3afb8561c4b5678c39b16fa94e661be36692116
- SSDEEP 1536:Z6QFElP6n+gMQMOtEvwDpjyaYaFAeG/Y8K:Z6a+pOtEvwDpjv91
- TLSH T18C430F386FD51A72E377CAB585F682C3B936B8227C22990D50CE17450C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE