General
- Target 2026-08-03_c18157a9ada60488e515c7dbad101cd3_cryptolocker_elex
- Size 41KB
- Sample260804-lw9staxcjf
- SHA256 33b1c3d33cbb6f5b15afb4f4e5f94c3696b4021c2e3439c17535f4b1e4ed599b
- MD5 c18157a9ada60488e515c7dbad101cd3
- SHA1 83c053a4b8a2d8565ec75fcfcc9cb2b71cc2d025
- SHA512 dd32af768dfce9fdb3b6c991d9d9840d03e1696c27d21703e1a98bb936915b3f4fcfefffe579c07825637775e230d57fb79a4b0c8c93311071e05f433387497d
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXC2:bgGYcA/53GAGgIvFH
- TLSH T1AF1374387FE62972E37BDFB586F691C27975B8223D16880D44CA53844833F66DC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-03_c18157a9ada60488e515c7dbad101cd3_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_c18157a9ada60488e515c7dbad101cd3_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-03_c18157a9ada60488e515c7dbad101cd3_cryptolocker_elex
- Size 41KB
- SHA256 33b1c3d33cbb6f5b15afb4f4e5f94c3696b4021c2e3439c17535f4b1e4ed599b
- MD5 c18157a9ada60488e515c7dbad101cd3
- SHA1 83c053a4b8a2d8565ec75fcfcc9cb2b71cc2d025
- SHA512 dd32af768dfce9fdb3b6c991d9d9840d03e1696c27d21703e1a98bb936915b3f4fcfefffe579c07825637775e230d57fb79a4b0c8c93311071e05f433387497d
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXC2:bgGYcA/53GAGgIvFH
- TLSH T1AF1374387FE62972E37BDFB586F691C27975B8223D16880D44CA53844833F66DC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE