General
- Target 2026-08-13_946a7295425239212d86f6c3fa5d9fa4_cryptolocker_elex
- Size 55KB
- Sample260813-kncyfadr9y
- SHA256 d20bc8fc9a28dcedb2a17372efb5f8ba9a442d36562749752a408ada7f4ba565
- MD5 946a7295425239212d86f6c3fa5d9fa4
- SHA1 a95ed85b8f576d8cd31f7be7e5fefe7c40465f17
- SHA512 89e235950964b7beafef6f307f31ece86029e9a1b3eabb696f45da1a2e13177730dea0889bb1210e7118e766cc6a48409a429521fa5bd86a3ef8a9aacf0a4703
- SSDEEP 1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61k:BbdDmjr+OtEvwDpjMe
- TLSH T16C43FC3C6ED526B2E377DAB6C9F695C6B835B82279129C0D50CB13450C23F52BCA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-13_946a7295425239212d86f6c3fa5d9fa4_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_946a7295425239212d86f6c3fa5d9fa4_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_946a7295425239212d86f6c3fa5d9fa4_cryptolocker_elex
- Size 55KB
- SHA256 d20bc8fc9a28dcedb2a17372efb5f8ba9a442d36562749752a408ada7f4ba565
- MD5 946a7295425239212d86f6c3fa5d9fa4
- SHA1 a95ed85b8f576d8cd31f7be7e5fefe7c40465f17
- SHA512 89e235950964b7beafef6f307f31ece86029e9a1b3eabb696f45da1a2e13177730dea0889bb1210e7118e766cc6a48409a429521fa5bd86a3ef8a9aacf0a4703
- SSDEEP 1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61k:BbdDmjr+OtEvwDpjMe
- TLSH T16C43FC3C6ED526B2E377DAB6C9F695C6B835B82279129C0D50CB13450C23F52BCA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE