General
- Target 2026-08-07_31bcccd76bf1aac78ede5e5fd259357d_cryptolocker_elex
- Size 56KB
- Sample260807-ctsbbayzat
- SHA256 970ed1e5b6524a2ce0073c03928730c53c85a1fef8459930a47672e11a129a6f
- MD5 31bcccd76bf1aac78ede5e5fd259357d
- SHA1 4a29dee24c516a1f7fd007f1af7be7f1ad2ba027
- SHA512 936d53f55bf3e460bd0c2fae109983d1c8295ce2a0d56d6c33c4a82147bf4964af02a5fdb35c6ec328636ae78284dc742a38f3aeea2ca02c1890409fb2d0ab21
- SSDEEP 768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqr8y+SO4m4qgp0hyL:bc/y2lkF0+Bjr1+kDqgpxL
- TLSH T1DC43443C7FD55A72E377C6B585F2A1C6FA39B81239069C0D50CB93840833F56ADA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-07_31bcccd76bf1aac78ede5e5fd259357d_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_31bcccd76bf1aac78ede5e5fd259357d_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_31bcccd76bf1aac78ede5e5fd259357d_cryptolocker_elex
- Size 56KB
- SHA256 970ed1e5b6524a2ce0073c03928730c53c85a1fef8459930a47672e11a129a6f
- MD5 31bcccd76bf1aac78ede5e5fd259357d
- SHA1 4a29dee24c516a1f7fd007f1af7be7f1ad2ba027
- SHA512 936d53f55bf3e460bd0c2fae109983d1c8295ce2a0d56d6c33c4a82147bf4964af02a5fdb35c6ec328636ae78284dc742a38f3aeea2ca02c1890409fb2d0ab21
- SSDEEP 768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMRqr8y+SO4m4qgp0hyL:bc/y2lkF0+Bjr1+kDqgpxL
- TLSH T1DC43443C7FD55A72E377C6B585F2A1C6FA39B81239069C0D50CB93840833F56ADA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE