General
- Target 2026-08-05_e401b90f19bedc71ded84d49c93bf31b_cryptolocker_elex
- Size 47KB
- Sample260805-fbav4aap3t
- SHA256 8025aea73d9c85a0e3ae49d0e37e70044a8e57c95bb182eb8079d84415750542
- MD5 e401b90f19bedc71ded84d49c93bf31b
- SHA1 2860318e421a652c2b2cf24e7f1a2478f0b977e0
- SHA512 be7f44871190f81e2d2e5b05edd591ec0f0f9cd80089298336e00d1863da892c39f2b8dd72c038ad44af8140aaf6d3d0076ff4a331ccd6e82d6387c76c7564d4
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcJEhua:bgGYcA/53GAGgIvF7Eka
- TLSH T1132321387BE52932D37BDFB586F691C6B975B8223D16980D40CA43444C33F66ECA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-05_e401b90f19bedc71ded84d49c93bf31b_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_e401b90f19bedc71ded84d49c93bf31b_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_e401b90f19bedc71ded84d49c93bf31b_cryptolocker_elex
- Size 47KB
- SHA256 8025aea73d9c85a0e3ae49d0e37e70044a8e57c95bb182eb8079d84415750542
- MD5 e401b90f19bedc71ded84d49c93bf31b
- SHA1 2860318e421a652c2b2cf24e7f1a2478f0b977e0
- SHA512 be7f44871190f81e2d2e5b05edd591ec0f0f9cd80089298336e00d1863da892c39f2b8dd72c038ad44af8140aaf6d3d0076ff4a331ccd6e82d6387c76c7564d4
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcJEhua:bgGYcA/53GAGgIvF7Eka
- TLSH T1132321387BE52932D37BDFB586F691C6B975B8223D16980D40CA43444C33F66ECA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE