General
- Target 2026-08-18_9fa828017855684db0ea2ac07f886647_cryptolocker_elex
- Size 47KB
- Sample260818-j3valayerc
- SHA256 91e0cddb7810c9cd1994cddbfcc59006a2a327ae0cee291555d3f254a0e1c1af
- MD5 9fa828017855684db0ea2ac07f886647
- SHA1 97b09bd5aa86face80b50da4b4e8b284306a3ad6
- SHA512 f8d7f5d5eada7c37a2f187e9e7a16fc82884de5b04da7059346b952f292fa085f8d7c28af480567db9fc6e2dbc51e97a8a706c45de66d274841af1e901d1dca2
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcJEhzeS:bgGYcA/53GAGgIvF7Ex
- TLSH T1412321387FE52932D37BDFB586F691C6B975B8223D16980D40CA43444C23F66ECA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-18_9fa828017855684db0ea2ac07f886647_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-18_9fa828017855684db0ea2ac07f886647_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-18_9fa828017855684db0ea2ac07f886647_cryptolocker_elex
- Size 47KB
- SHA256 91e0cddb7810c9cd1994cddbfcc59006a2a327ae0cee291555d3f254a0e1c1af
- MD5 9fa828017855684db0ea2ac07f886647
- SHA1 97b09bd5aa86face80b50da4b4e8b284306a3ad6
- SHA512 f8d7f5d5eada7c37a2f187e9e7a16fc82884de5b04da7059346b952f292fa085f8d7c28af480567db9fc6e2dbc51e97a8a706c45de66d274841af1e901d1dca2
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcJEhzeS:bgGYcA/53GAGgIvF7Ex
- TLSH T1412321387FE52932D37BDFB586F691C6B975B8223D16980D40CA43444C23F66ECA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE