General
- Target 2026-08-10_13c126429aec52ca0d5cddb5f59aeeba_cryptolocker_elex
- Size 57KB
- Sample260810-pm75eagb44
- SHA256 375286444918d21ab88b9e5b6ed702dbd2da9aec9fc3a977552fb75db15e1958
- MD5 13c126429aec52ca0d5cddb5f59aeeba
- SHA1 8763ae2bacf742ecd58ff92d767e1f4f47b04b0b
- SHA512 5ad3a8d328a777dfadd5e7fc63ce041cb9d48711b44554195d7ddb4811ea0807b3bbde522903ae6a74f5072f0c90cef6cb77a060644a31e13cb099011e83914f
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpP+Thc:b7/y28wZEjbnouy8G76iH/NLpIhc
- TLSH T12D439438BBE55972D37BC57554F3B1C2B93AB8123D029C0E55CBA3890833B5AAD90B1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-10_13c126429aec52ca0d5cddb5f59aeeba_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_13c126429aec52ca0d5cddb5f59aeeba_cryptolocker_elex
- Size 57KB
- SHA256 375286444918d21ab88b9e5b6ed702dbd2da9aec9fc3a977552fb75db15e1958
- MD5 13c126429aec52ca0d5cddb5f59aeeba
- SHA1 8763ae2bacf742ecd58ff92d767e1f4f47b04b0b
- SHA512 5ad3a8d328a777dfadd5e7fc63ce041cb9d48711b44554195d7ddb4811ea0807b3bbde522903ae6a74f5072f0c90cef6cb77a060644a31e13cb099011e83914f
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpP+Thc:b7/y28wZEjbnouy8G76iH/NLpIhc
- TLSH T12D439438BBE55972D37BC57554F3B1C2B93AB8123D029C0E55CBA3890833B5AAD90B1D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE