General
- Target 2026-08-02_a1c99e12ec62bf4710955fc5cd1dcf7e_cryptolocker_elex
- Size 73KB
- Sample260802-vzhyyaxfkd
- SHA256 75c209a055242083144c3a9d91c33ccf5c36e2edc1b114e065ab5ba0d3ce2dfb
- MD5 a1c99e12ec62bf4710955fc5cd1dcf7e
- SHA1 0623d0a330b34cf16d9b4b52d2e56a34d34134e2
- SHA512 0a949f204d61029ba308868d05de97f183d11bf216be2b9d3258f3b76a3b0da054a7a121b9b65a8865bf0fd5264c5a827d02d32e60167ba2db2c6338ffcf6e20
- SSDEEP 1536:vj+jsMQMOtEvwDpj5HczerLO04BGc189Y0RxKFgzkzpB:vCjsIOtEvwDpj5HGWY0Rkf7
- TLSH T119731E396FD91672E37BDAB5CAF691C2BA75B4223D12980D40CA43450C33F56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-02_a1c99e12ec62bf4710955fc5cd1dcf7e_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_a1c99e12ec62bf4710955fc5cd1dcf7e_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_a1c99e12ec62bf4710955fc5cd1dcf7e_cryptolocker_elex
- Size 73KB
- SHA256 75c209a055242083144c3a9d91c33ccf5c36e2edc1b114e065ab5ba0d3ce2dfb
- MD5 a1c99e12ec62bf4710955fc5cd1dcf7e
- SHA1 0623d0a330b34cf16d9b4b52d2e56a34d34134e2
- SHA512 0a949f204d61029ba308868d05de97f183d11bf216be2b9d3258f3b76a3b0da054a7a121b9b65a8865bf0fd5264c5a827d02d32e60167ba2db2c6338ffcf6e20
- SSDEEP 1536:vj+jsMQMOtEvwDpj5HczerLO04BGc189Y0RxKFgzkzpB:vCjsIOtEvwDpj5HGWY0Rkf7
- TLSH T119731E396FD91672E37BDAB5CAF691C2BA75B4223D12980D40CA43450C33F56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE