General
- Target 2026-08-13_86333269b73e200c9938273a67d96823_cryptolocker_elex
- Size 57KB
- Sample260813-ezy26azwfv
- SHA256 56de2b5cf108c82510c05eab6b466990b32175aea2f0800a12114f4cdae775bb
- MD5 86333269b73e200c9938273a67d96823
- SHA1 7c39875ba03efdd36cf188e4849b1a87f399e781
- SHA512 de0ca0b5f94a1544091eb286fd22620ac7b98724f36c8507f8510350711bb1abd081ca0dc9dde144b9bf41389b4c9005ded49b4c703a7903502ac686892015cd
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpP+Thy2:b7/y28wZEjbnouy8G76iH/NLpIh7
- TLSH T169438438BBE45972D37BC57554F3B1C6B93AB8123D029C0E55CB63890833B5AAD90B1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-13_86333269b73e200c9938273a67d96823_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_86333269b73e200c9938273a67d96823_cryptolocker_elex
- Size 57KB
- SHA256 56de2b5cf108c82510c05eab6b466990b32175aea2f0800a12114f4cdae775bb
- MD5 86333269b73e200c9938273a67d96823
- SHA1 7c39875ba03efdd36cf188e4849b1a87f399e781
- SHA512 de0ca0b5f94a1544091eb286fd22620ac7b98724f36c8507f8510350711bb1abd081ca0dc9dde144b9bf41389b4c9005ded49b4c703a7903502ac686892015cd
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpP+Thy2:b7/y28wZEjbnouy8G76iH/NLpIh7
- TLSH T169438438BBE45972D37BC57554F3B1C6B93AB8123D029C0E55CB63890833B5AAD90B1D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE