General
- Target 2026-08-11_249ef0496ce28117efe91ef9c0ca7a75_cryptolocker_elex
- Size 58KB
- Sample260811-papsasyxc1
- SHA256 40291e88301149cbbeebb8bf486a82df0a59460c45a66a3ef4d439a67adadd94
- MD5 249ef0496ce28117efe91ef9c0ca7a75
- SHA1 004f027662d629995cfe9e3b1f580b78a6afe56e
- SHA512 55b2c8af0657c0026f0d9889bc5a3ea9f390912d86a89a3278f6910c7eaca43d67b198ed3edf9bb636ba06b673bccf64c4fb69545bd9c540a441358d2fd0ca23
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpP+Thj:b7/y28wZEjbnouy8G76iH/NLpIhj
- TLSH T13F438438BBE45972D37BC57584F3A1C6B936B8123D029C0E55CB63890833B5AAD90B1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-11_249ef0496ce28117efe91ef9c0ca7a75_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_249ef0496ce28117efe91ef9c0ca7a75_cryptolocker_elex
- Size 58KB
- SHA256 40291e88301149cbbeebb8bf486a82df0a59460c45a66a3ef4d439a67adadd94
- MD5 249ef0496ce28117efe91ef9c0ca7a75
- SHA1 004f027662d629995cfe9e3b1f580b78a6afe56e
- SHA512 55b2c8af0657c0026f0d9889bc5a3ea9f390912d86a89a3278f6910c7eaca43d67b198ed3edf9bb636ba06b673bccf64c4fb69545bd9c540a441358d2fd0ca23
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpP+Thj:b7/y28wZEjbnouy8G76iH/NLpIhj
- TLSH T13F438438BBE45972D37BC57584F3A1C6B936B8123D029C0E55CB63890833B5AAD90B1D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE