General
- Target 2026-08-08_4aa6e4db9c720d03374927f1fe21ab97_cryptolocker_elex
- Size 57KB
- Sample260808-my22esdr4x
- SHA256 7246d0500b7b0244c0d91189c427754521943c3a1aa0a43013630c53e10da71e
- MD5 4aa6e4db9c720d03374927f1fe21ab97
- SHA1 a7d9edc43279679cfb064fc398a02fbf2ea08d7c
- SHA512 8b0177d3cce7540ec3aed5c7f91fccb7134d81fbe2f4f62dfbf5a15d49ebdf84f1fa19a5e73b2988f066e535a5c7d633313176080ccd6242a7c8cca69e019dc8
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpPFPW40:b7/y28wZEjbnouy8G76iH/NLpQ40
- TLSH T1FF438439BBE859B2D3BB857594F3B0C6BD36B81239019C0E55CB63880D33B5ABD9061D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-08_4aa6e4db9c720d03374927f1fe21ab97_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_4aa6e4db9c720d03374927f1fe21ab97_cryptolocker_elex
- Size 57KB
- SHA256 7246d0500b7b0244c0d91189c427754521943c3a1aa0a43013630c53e10da71e
- MD5 4aa6e4db9c720d03374927f1fe21ab97
- SHA1 a7d9edc43279679cfb064fc398a02fbf2ea08d7c
- SHA512 8b0177d3cce7540ec3aed5c7f91fccb7134d81fbe2f4f62dfbf5a15d49ebdf84f1fa19a5e73b2988f066e535a5c7d633313176080ccd6242a7c8cca69e019dc8
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpPFPW40:b7/y28wZEjbnouy8G76iH/NLpQ40
- TLSH T1FF438439BBE859B2D3BB857594F3B0C6BD36B81239019C0E55CB63880D33B5ABD9061D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE