General
- Target 2026-08-14_11487ea06aa38614771db0843993d9c9_cryptolocker_elex
- Size 46KB
- Sample260815-ansc1scj81
- SHA256 229b190b6d210777e4f7b363f5862e74ea49f436517926393eded002852b4c3b
- MD5 11487ea06aa38614771db0843993d9c9
- SHA1 0683d939efbf022f835fabb28557dc931d64b47e
- SHA512 cb2ed3bbfe34624c9923e470ec8258598c7c3ba4c915073a3f499eae1dd6d1717748e0f2bfaeaf5aca3e4fa30fc3b4e6049f3c9facd09d0884650e5be04190eb
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcJEhzM:bgGYcA/53GAGgIvF7Eq
- TLSH T1972321387FE52932D37BDFB586F691C6B975B8223D16980D40CA43444823F66ECA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-14_11487ea06aa38614771db0843993d9c9_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-14_11487ea06aa38614771db0843993d9c9_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-14_11487ea06aa38614771db0843993d9c9_cryptolocker_elex
- Size 46KB
- SHA256 229b190b6d210777e4f7b363f5862e74ea49f436517926393eded002852b4c3b
- MD5 11487ea06aa38614771db0843993d9c9
- SHA1 0683d939efbf022f835fabb28557dc931d64b47e
- SHA512 cb2ed3bbfe34624c9923e470ec8258598c7c3ba4c915073a3f499eae1dd6d1717748e0f2bfaeaf5aca3e4fa30fc3b4e6049f3c9facd09d0884650e5be04190eb
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcJEhzM:bgGYcA/53GAGgIvF7Eq
- TLSH T1972321387FE52932D37BDFB586F691C6B975B8223D16980D40CA43444823F66ECA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE