General
- Target 2026-08-08_e2477d91bc0b60681a3cd5e1badbd48a_cryptolocker_elex
- Size 56KB
- Sample260808-mrmcdsdp9t
- SHA256 b4748d01e022f71d2afcea1132bba96004c6d5e08c210251df36627bec4ce656
- MD5 e2477d91bc0b60681a3cd5e1badbd48a
- SHA1 63edc67ec2048cc0fe0b273965e053dc466d33c4
- SHA512 f6df8bbbd2624f193176af0bca07194efe7abbb1dc9ec624031895a91264e116207f2449c330d732867c3b486cd77ad28cfc339ec80e9ddd30ee12baffe7ee54
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpPFPW4Y:b7/y28wZEjbnouy8G76iH/NLpQ4Y
- TLSH T1E3438439BBE459B2D3BB857594F3B0C6B936B81239019C0E55CB63880D33B5ABD9071D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_e2477d91bc0b60681a3cd5e1badbd48a_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_e2477d91bc0b60681a3cd5e1badbd48a_cryptolocker_elex
- Size 56KB
- SHA256 b4748d01e022f71d2afcea1132bba96004c6d5e08c210251df36627bec4ce656
- MD5 e2477d91bc0b60681a3cd5e1badbd48a
- SHA1 63edc67ec2048cc0fe0b273965e053dc466d33c4
- SHA512 f6df8bbbd2624f193176af0bca07194efe7abbb1dc9ec624031895a91264e116207f2449c330d732867c3b486cd77ad28cfc339ec80e9ddd30ee12baffe7ee54
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpPFPW4Y:b7/y28wZEjbnouy8G76iH/NLpQ4Y
- TLSH T1E3438439BBE459B2D3BB857594F3B0C6B936B81239019C0E55CB63880D33B5ABD9071D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE