General
- Target 2026-08-02_30288029b76d85a948230280453046cd_cryptolocker_elex
- Size 57KB
- Sample260802-xtfyhazeka
- SHA256 fe79e866c07cf3480eb1ab7fe977490657361e22dae236b86de4b47955beeb62
- MD5 30288029b76d85a948230280453046cd
- SHA1 8dd46ba60e23fa6e943615297fc45434c85923c5
- SHA512 dc10692443b8ec56202fafe010258c9e78168e73b87c4c95a99d099912706968a357c0d7228a56fdf5c94f567db604a37ae3b82645afa327f8b1e2f27af4144d
- SSDEEP 768:b3o/2n1TCraU6GD1gdcKX4WcO+wMVm+slAMphNuhX3HdAxmlkMl1fEPtw32:b4/y2M1oF0+BeghXuMUl
- TLSH T13A43743DBFD51672D37786B585F7A0C6FA3AB82239069C0D50CB53880933F56ADA160D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-02_30288029b76d85a948230280453046cd_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_30288029b76d85a948230280453046cd_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_30288029b76d85a948230280453046cd_cryptolocker_elex
- Size 57KB
- SHA256 fe79e866c07cf3480eb1ab7fe977490657361e22dae236b86de4b47955beeb62
- MD5 30288029b76d85a948230280453046cd
- SHA1 8dd46ba60e23fa6e943615297fc45434c85923c5
- SHA512 dc10692443b8ec56202fafe010258c9e78168e73b87c4c95a99d099912706968a357c0d7228a56fdf5c94f567db604a37ae3b82645afa327f8b1e2f27af4144d
- SSDEEP 768:b3o/2n1TCraU6GD1gdcKX4WcO+wMVm+slAMphNuhX3HdAxmlkMl1fEPtw32:b4/y2M1oF0+BeghXuMUl
- TLSH T13A43743DBFD51672D37786B585F7A0C6FA3AB82239069C0D50CB53880933F56ADA160D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE