General
- Target 2026-08-07_7656d34d29e0f2dc1b99858b96d56fdc_cryptolocker_elex
- Size 35KB
- Sample260807-b9dbnaywct
- SHA256 2c9c013dea56cc0513ddfcb920b1c84154747e8e86ec5da96ea2b0cd9921b40c
- MD5 7656d34d29e0f2dc1b99858b96d56fdc
- SHA1 dc5727d217799bf90950343c7f11b0964c539442
- SHA512 eb93fd659f75d90b522af035c7a5a84e29c11246db81878e27e2ac04389d6185c077e719ab19ce6f5d525df0e6437980d8a86683b803d859673fcbb4bb45a97a
- SSDEEP 768:df1K2exzikBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGS/YIm7wm+3:B1KhxTwtdgI2MyzNORQtOflIwoHNV2Xw
- TLSH T161F25436AED515E6D673AA73F4F792C2E927BD653922450E108A3F0049F3781BCA1D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-07_7656d34d29e0f2dc1b99858b96d56fdc_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_7656d34d29e0f2dc1b99858b96d56fdc_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_7656d34d29e0f2dc1b99858b96d56fdc_cryptolocker_elex
- Size 35KB
- SHA256 2c9c013dea56cc0513ddfcb920b1c84154747e8e86ec5da96ea2b0cd9921b40c
- MD5 7656d34d29e0f2dc1b99858b96d56fdc
- SHA1 dc5727d217799bf90950343c7f11b0964c539442
- SHA512 eb93fd659f75d90b522af035c7a5a84e29c11246db81878e27e2ac04389d6185c077e719ab19ce6f5d525df0e6437980d8a86683b803d859673fcbb4bb45a97a
- SSDEEP 768:df1K2exzikBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGS/YIm7wm+3:B1KhxTwtdgI2MyzNORQtOflIwoHNV2Xw
- TLSH T161F25436AED515E6D673AA73F4F792C2E927BD653922450E108A3F0049F3781BCA1D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE