General
- Target 2026-08-12_584ba6bb2a3b4d98335202a2dc820bd7_cryptolocker_elex
- Size 37KB
- Sample260812-m4rsmsvfmf
- SHA256 15a1d0f545e79bfd10291e9703b2532cd6ebaa71b9fb4dd9ae5b779ab69c2a5c
- MD5 584ba6bb2a3b4d98335202a2dc820bd7
- SHA1 05b8c9a690020633d6813754fd4b399f6aa65815
- SHA512 dd8f87579c33dfe05d7e54b2654b31bc63885ac82b98d842e67e01714086da30f0ab164e853695fde4c0d19c8e297d173f44f35f0d02f1bc183543bad8ac5e42
- SSDEEP 768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNf2VlUu:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xd
- TLSH T1310353326FD515E1E7779A73F9F691C2E926BC263C22850D008A7F4409F3A91EDA1D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-12_584ba6bb2a3b4d98335202a2dc820bd7_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-12_584ba6bb2a3b4d98335202a2dc820bd7_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-12_584ba6bb2a3b4d98335202a2dc820bd7_cryptolocker_elex
- Size 37KB
- SHA256 15a1d0f545e79bfd10291e9703b2532cd6ebaa71b9fb4dd9ae5b779ab69c2a5c
- MD5 584ba6bb2a3b4d98335202a2dc820bd7
- SHA1 05b8c9a690020633d6813754fd4b399f6aa65815
- SHA512 dd8f87579c33dfe05d7e54b2654b31bc63885ac82b98d842e67e01714086da30f0ab164e853695fde4c0d19c8e297d173f44f35f0d02f1bc183543bad8ac5e42
- SSDEEP 768:Kf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGbNAKSjNf2VlUu:o1KhxqwtdgI2MyzNORQtOflIwoHNV2Xd
- TLSH T1310353326FD515E1E7779A73F9F691C2E926BC263C22850D008A7F4409F3A91EDA1D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE