General
- Target 2026-08-06_944fa3de71f29b330be9f6038861db52_cryptolocker_elex
- Size 73KB
- Sample260806-hfr2aavgkh
- SHA256 6627cc58b84d2af12cb78dc274665b850661aabb152a292f0473ff3c31bc8157
- MD5 944fa3de71f29b330be9f6038861db52
- SHA1 aeba7aeb08d41eefb2096822ba60a31a9d5e0cbc
- SHA512 dbd0550bacdd0de7257d916744f10464fb18f8b31821e267d4d016becf08c7b9d2be55fffb061b7eebed669a3a55ddb47be0c1d5ef5bc0ec3bb25f35f2118f30
- SSDEEP 1536:vj+jsMQMOtEvwDpj5HczerLO04BGc189Y0RxKFgzkzgm:vCjsIOtEvwDpj5HGWY0RkfL
- TLSH T123730E396FD91672E37BDAB5CAF691C2BA75B4223D12980D40CA43450C33F56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-06_944fa3de71f29b330be9f6038861db52_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_944fa3de71f29b330be9f6038861db52_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_944fa3de71f29b330be9f6038861db52_cryptolocker_elex
- Size 73KB
- SHA256 6627cc58b84d2af12cb78dc274665b850661aabb152a292f0473ff3c31bc8157
- MD5 944fa3de71f29b330be9f6038861db52
- SHA1 aeba7aeb08d41eefb2096822ba60a31a9d5e0cbc
- SHA512 dbd0550bacdd0de7257d916744f10464fb18f8b31821e267d4d016becf08c7b9d2be55fffb061b7eebed669a3a55ddb47be0c1d5ef5bc0ec3bb25f35f2118f30
- SSDEEP 1536:vj+jsMQMOtEvwDpj5HczerLO04BGc189Y0RxKFgzkzgm:vCjsIOtEvwDpj5HGWY0RkfL
- TLSH T123730E396FD91672E37BDAB5CAF691C2BA75B4223D12980D40CA43450C33F56EDA1E0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE