General
- Target 2026-08-09_ddd6370cf1656f23391a9d030932be20_cryptolocker_elex
- Size 42KB
- Sample260809-elfnnattcy
- SHA256 cf56d176efdfb6e706e184a5c76ac0c6b20221b1356ba2116b56889f6a772a3b
- MD5 ddd6370cf1656f23391a9d030932be20
- SHA1 f06561887b33df25dce2f0d2585691bacb60f612
- SHA512 ff2668c11ba56226082f5041782db8e15aa096ae89e23b087a4daa9d76cc925d3744bb7dcafcc3565aa6b25f693df01c011a66234b5e19a5818188752fd4aa99
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCXx:bgGYcA/53GAGgIvFk
- TLSH T1541373387BE62972E37BDFB586F691C67975B8223D16880D40CE53844833F65DCA1A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-09_ddd6370cf1656f23391a9d030932be20_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_ddd6370cf1656f23391a9d030932be20_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_ddd6370cf1656f23391a9d030932be20_cryptolocker_elex
- Size 42KB
- SHA256 cf56d176efdfb6e706e184a5c76ac0c6b20221b1356ba2116b56889f6a772a3b
- MD5 ddd6370cf1656f23391a9d030932be20
- SHA1 f06561887b33df25dce2f0d2585691bacb60f612
- SHA512 ff2668c11ba56226082f5041782db8e15aa096ae89e23b087a4daa9d76cc925d3744bb7dcafcc3565aa6b25f693df01c011a66234b5e19a5818188752fd4aa99
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCXx:bgGYcA/53GAGgIvFk
- TLSH T1541373387BE62972E37BDFB586F691C67975B8223D16880D40CE53844833F65DCA1A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE