General
- Target 2026-08-04_aa8884a7baae61bd8912820d61d0fe13_cryptolocker_elex
- Size 41KB
- Sample260804-gm4szsdh98
- SHA256 e34907b10b3b47b80b4a61fd87e1f9419c7b869531c24cd275f7be7d88e6eed5
- MD5 aa8884a7baae61bd8912820d61d0fe13
- SHA1 53758e5abc3813e92b767f8275c033256f7986f0
- SHA512 cbd041229d4dbc3cedfbdb7c608698c92b0235c7909f8e8bae18079f7893a7f744f534bb0daef6ffea5c3be51c982c32eb104bf7b62852d06335583aff30f4e2
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCw:bgGYcA/53GAGgIvFl
- TLSH T12E1374387FE62972E37BDFB586F691C27975B8223D16880D44CA53844833F66DC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-04_aa8884a7baae61bd8912820d61d0fe13_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_aa8884a7baae61bd8912820d61d0fe13_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_aa8884a7baae61bd8912820d61d0fe13_cryptolocker_elex
- Size 41KB
- SHA256 e34907b10b3b47b80b4a61fd87e1f9419c7b869531c24cd275f7be7d88e6eed5
- MD5 aa8884a7baae61bd8912820d61d0fe13
- SHA1 53758e5abc3813e92b767f8275c033256f7986f0
- SHA512 cbd041229d4dbc3cedfbdb7c608698c92b0235c7909f8e8bae18079f7893a7f744f534bb0daef6ffea5c3be51c982c32eb104bf7b62852d06335583aff30f4e2
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCw:bgGYcA/53GAGgIvFl
- TLSH T12E1374387FE62972E37BDFB586F691C27975B8223D16880D44CA53844833F66DC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE