General
- Target 2026-08-19_6eb52750a92caaab603416395a84a0cd_cryptolocker_elex
- Size 47KB
- Sample260819-nkbsraef42
- SHA256 708862dfbcc28fa1bf8fab06f4c6c9b6a9551ab43729a7b0f535f50a1b0e3b56
- MD5 6eb52750a92caaab603416395a84a0cd
- SHA1 d5c72e894cb96b9d846d28da3b1c0c79302896e4
- SHA512 1cfa084593e4652fb1990d103cc68755ec1154ed828c59f968734dc4ae39761fec4d01b4c44a719c72f142b1b1d706d1fbee0730e149a137541f85e2223c1531
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcJEhzZ4H:bgGYcA/53GAGgIvF7ES
- TLSH T1922321387FE52932D37BDFB586F691C6B975B8223D16980D40CA43444833F66ECA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_6eb52750a92caaab603416395a84a0cd_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_6eb52750a92caaab603416395a84a0cd_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_6eb52750a92caaab603416395a84a0cd_cryptolocker_elex
- Size 47KB
- SHA256 708862dfbcc28fa1bf8fab06f4c6c9b6a9551ab43729a7b0f535f50a1b0e3b56
- MD5 6eb52750a92caaab603416395a84a0cd
- SHA1 d5c72e894cb96b9d846d28da3b1c0c79302896e4
- SHA512 1cfa084593e4652fb1990d103cc68755ec1154ed828c59f968734dc4ae39761fec4d01b4c44a719c72f142b1b1d706d1fbee0730e149a137541f85e2223c1531
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcJEhzZ4H:bgGYcA/53GAGgIvF7ES
- TLSH T1922321387FE52932D37BDFB586F691C6B975B8223D16980D40CA43444833F66ECA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE