General
- Target 2026-08-08_a5603b16b2fea2eacf1e72eec236a08c_cryptolocker_elex
- Size 56KB
- Sample260808-g7p6bsar5s
- SHA256 3360a3fece24e5d92adbc495a7eaa6616a5be382acd60347520de7f3b83f9bbc
- MD5 a5603b16b2fea2eacf1e72eec236a08c
- SHA1 57ce4759d747e7b6d0c8098739c7032f50f08c9a
- SHA512 6cc182870f8f690fc63a989bd9e33c35d94ce1a7fbe55071e7e450170d93f4a237d4fa8cec8b10be8a7ef3fdf993c5ef18e58e3fbdffb0e9fe5764265ca86c5c
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpPFPW40:b7/y28wZEjbnouy8G76iH/NLpQ40
- TLSH T1C3438439BBE859B2D3BB857594F3B0C6BD36B81239019C0E55CB63880D33B5ABD9061D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_a5603b16b2fea2eacf1e72eec236a08c_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_a5603b16b2fea2eacf1e72eec236a08c_cryptolocker_elex
- Size 56KB
- SHA256 3360a3fece24e5d92adbc495a7eaa6616a5be382acd60347520de7f3b83f9bbc
- MD5 a5603b16b2fea2eacf1e72eec236a08c
- SHA1 57ce4759d747e7b6d0c8098739c7032f50f08c9a
- SHA512 6cc182870f8f690fc63a989bd9e33c35d94ce1a7fbe55071e7e450170d93f4a237d4fa8cec8b10be8a7ef3fdf993c5ef18e58e3fbdffb0e9fe5764265ca86c5c
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpPFPW40:b7/y28wZEjbnouy8G76iH/NLpQ40
- TLSH T1C3438439BBE859B2D3BB857594F3B0C6BD36B81239019C0E55CB63880D33B5ABD9061D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE