General
- Target 2026-08-04_0ec222e0e8c6b5915742bb577f4d42de_cryptolocker_elex
- Size 54KB
- Sample260804-t8cylsam9y
- SHA256 359243692ee21532713fd30c2e74a2ac0f9387d59447f490692e15a63357959b
- MD5 0ec222e0e8c6b5915742bb577f4d42de
- SHA1 d4cb09fd4fb264aa10afa6c1dfbb0edf8c682691
- SHA512 1e3cf47917fbe4661e4e2090fad226d1eb235e079e4affe0d11cdfe0c479a03f81136fd8d83c13c0eb8457edd1f7ff71042e00c73c10d473ecb18eddadb6f5d7
- SSDEEP 1536:Z6QFElP6n+gMQMOtEvwDpjyaYaFAeG/Y86:Z6a+pOtEvwDpjv91
- TLSH T14A430E386FD51A72E377CAB585F686C3B936B8227822990D50CE17410C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-04_0ec222e0e8c6b5915742bb577f4d42de_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_0ec222e0e8c6b5915742bb577f4d42de_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_0ec222e0e8c6b5915742bb577f4d42de_cryptolocker_elex
- Size 54KB
- SHA256 359243692ee21532713fd30c2e74a2ac0f9387d59447f490692e15a63357959b
- MD5 0ec222e0e8c6b5915742bb577f4d42de
- SHA1 d4cb09fd4fb264aa10afa6c1dfbb0edf8c682691
- SHA512 1e3cf47917fbe4661e4e2090fad226d1eb235e079e4affe0d11cdfe0c479a03f81136fd8d83c13c0eb8457edd1f7ff71042e00c73c10d473ecb18eddadb6f5d7
- SSDEEP 1536:Z6QFElP6n+gMQMOtEvwDpjyaYaFAeG/Y86:Z6a+pOtEvwDpjv91
- TLSH T14A430E386FD51A72E377CAB585F686C3B936B8227822990D50CE17410C33B56EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE