General
- Target 2026-08-07_4e4d6c6f5531e871d2db0f7e2b5f0694_cryptolocker_elex
- Size 53KB
- Sample260807-ynk6pssfjf
- SHA256 d4e9ca7917760fe00a77aa00f1e4f5b1f9e03a46893dfaf4097be222e800f39a
- MD5 4e4d6c6f5531e871d2db0f7e2b5f0694
- SHA1 42dd1d6679d0d5376109c55079c898dc60b282e1
- SHA512 de6893fadc88e23f778453b3cd896f3926987d7061a070013c379ca4bcea2e8496640093dfae8ba28679d8f2c1cf6bb4f688000d9cb3249cf862fd5baf2de938
- SSDEEP 1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatSj:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7S
- TLSH T1BC33DC396ED515F2D377DAB7E5F695C2F922B9223812880D40CB2F4409B3B52BDA1D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-07_4e4d6c6f5531e871d2db0f7e2b5f0694_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_4e4d6c6f5531e871d2db0f7e2b5f0694_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_4e4d6c6f5531e871d2db0f7e2b5f0694_cryptolocker_elex
- Size 53KB
- SHA256 d4e9ca7917760fe00a77aa00f1e4f5b1f9e03a46893dfaf4097be222e800f39a
- MD5 4e4d6c6f5531e871d2db0f7e2b5f0694
- SHA1 42dd1d6679d0d5376109c55079c898dc60b282e1
- SHA512 de6893fadc88e23f778453b3cd896f3926987d7061a070013c379ca4bcea2e8496640093dfae8ba28679d8f2c1cf6bb4f688000d9cb3249cf862fd5baf2de938
- SSDEEP 1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatSj:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7S
- TLSH T1BC33DC396ED515F2D377DAB7E5F695C2F922B9223812880D40CB2F4409B3B52BDA1D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE