General
- Target 2026-08-14_4b76b41d6f10e205ed4d4676c063fce2_cryptolocker_elex
- Size 58KB
- Sample260814-tgp4vsxapf
- SHA256 f69239d4fc425a7c0ed63cfbe9007327e2868be19c312a0f758a8c9dcbdb06e8
- MD5 4b76b41d6f10e205ed4d4676c063fce2
- SHA1 868bf176843811624b6e12827d1d1fa392084e9e
- SHA512 0e1635dac8022503f61201085ba7de0f2bf2faaad05973476b5d2be99720145a3e5963d8e190adb810ceb491885d580860a3a9f089453cc162162d5b06fca16a
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpP+Thy0h:b7/y28wZEjbnouy8G76iH/NLpIhVh
- TLSH T194438338BBE55972D37BC57554F3A1C2B93AB8123D029C0E55CBA3890833B5AAD90B1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-14_4b76b41d6f10e205ed4d4676c063fce2_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_4b76b41d6f10e205ed4d4676c063fce2_cryptolocker_elex
- Size 58KB
- SHA256 f69239d4fc425a7c0ed63cfbe9007327e2868be19c312a0f758a8c9dcbdb06e8
- MD5 4b76b41d6f10e205ed4d4676c063fce2
- SHA1 868bf176843811624b6e12827d1d1fa392084e9e
- SHA512 0e1635dac8022503f61201085ba7de0f2bf2faaad05973476b5d2be99720145a3e5963d8e190adb810ceb491885d580860a3a9f089453cc162162d5b06fca16a
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpP+Thy0h:b7/y28wZEjbnouy8G76iH/NLpIhVh
- TLSH T194438338BBE55972D37BC57554F3A1C2B93AB8123D029C0E55CBA3890833B5AAD90B1D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE