General
- Target 2026-08-08_8c472f1a3acb9414425fc0770a1795e8_cryptolocker_elex
- Size 35KB
- Sample260808-mwehcayydy
- SHA256 634ea13e481cae06d6f990ea187f24fa181cc4a99f94249a531f0d8e8e1a1d48
- MD5 8c472f1a3acb9414425fc0770a1795e8
- SHA1 9062ab7a349fc667b3e2f41bdc3c487f73d8de24
- SHA512 8b65ca6a36de202b3525daa2ac87776deedc75e7aaa879fc857474ca2309c850d0ff1c00244c9165309b732c935128d2f86f674f17e4b24a02025aa035a9ec6d
- SSDEEP 384:btBYQg/WIEhUCSNyepEjYnDOAlzVoGp6C0/zzodV7tkq4l8tFFxE2BodcAOjb82j:btB9g/WItCSsA5dAXwr3BGub4PnP8
- TLSH T1D6F2B6347FE55E72D237C5B644F3E1C2AA66BD2275168A1EA2CFB3490973B02EC4091D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-08_8c472f1a3acb9414425fc0770a1795e8_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_8c472f1a3acb9414425fc0770a1795e8_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_8c472f1a3acb9414425fc0770a1795e8_cryptolocker_elex
- Size 35KB
- SHA256 634ea13e481cae06d6f990ea187f24fa181cc4a99f94249a531f0d8e8e1a1d48
- MD5 8c472f1a3acb9414425fc0770a1795e8
- SHA1 9062ab7a349fc667b3e2f41bdc3c487f73d8de24
- SHA512 8b65ca6a36de202b3525daa2ac87776deedc75e7aaa879fc857474ca2309c850d0ff1c00244c9165309b732c935128d2f86f674f17e4b24a02025aa035a9ec6d
- SSDEEP 384:btBYQg/WIEhUCSNyepEjYnDOAlzVoGp6C0/zzodV7tkq4l8tFFxE2BodcAOjb82j:btB9g/WItCSsA5dAXwr3BGub4PnP8
- TLSH T1D6F2B6347FE55E72D237C5B644F3E1C2AA66BD2275168A1EA2CFB3490973B02EC4091D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE