General
- Target 2026-08-04_ecf60e65b2a43ac6051ba471951f6eca_cryptolocker_elex
- Size 56KB
- Sample260804-v65fhsar5w
- SHA256 7956ff39072df63931d527729534fc15400ca2ee63b903e9ef2dd8ce2afe0ca8
- MD5 ecf60e65b2a43ac6051ba471951f6eca
- SHA1 92c7693a53abe573cd87b4a42fe16473e6fa3d52
- SHA512 628a53175bba71a42ddc9c968d1c64e439b42062da0d35d0b2a4cbb02969d956a33af037df8c7040163d7d2fb20c2987f4df5fd273c4e9eee41ded55eb53acdc
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpPFPW4d:b7/y28wZEjbnouy8G76iH/NLpQ4d
- TLSH T119439439BBE859B2D3BB857594F3B0C6B936B81239019C0E55CB63880D33B5ABD9071D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-04_ecf60e65b2a43ac6051ba471951f6eca_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_ecf60e65b2a43ac6051ba471951f6eca_cryptolocker_elex
- Size 56KB
- SHA256 7956ff39072df63931d527729534fc15400ca2ee63b903e9ef2dd8ce2afe0ca8
- MD5 ecf60e65b2a43ac6051ba471951f6eca
- SHA1 92c7693a53abe573cd87b4a42fe16473e6fa3d52
- SHA512 628a53175bba71a42ddc9c968d1c64e439b42062da0d35d0b2a4cbb02969d956a33af037df8c7040163d7d2fb20c2987f4df5fd273c4e9eee41ded55eb53acdc
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpPFPW4d:b7/y28wZEjbnouy8G76iH/NLpQ4d
- TLSH T119439439BBE859B2D3BB857594F3B0C6B936B81239019C0E55CB63880D33B5ABD9071D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE