General
- Target 2026-08-20_c5d3561b795d252ef0e0517ffe94d544_cryptolocker_elex
- Size 39KB
- Sample260820-3ddq4ack3v
- SHA256 02f281a5c52b3a0deb218c3dd6a8ce2072c00e2898726931b958b8ec7f37b297
- MD5 c5d3561b795d252ef0e0517ffe94d544
- SHA1 c3a716fbf070038e970d0a56294aebd1d13282a3
- SHA512 5c9633d6df9467b45c3215b0e540799496c00c30ab638c13d1d519f31efbc81ed6014750d348f66a40133355877fbba1a0dac983ff81c2b69a93983b78725106
- SSDEEP 384:bdDl1ovmXAw9PMDREhi9OUSPlRxMc/cip58TfjDN0g/HNblX7QCOBqYvazTvbqv:bdDOw9Uiaw8fjR0STX73OBqgazTDw
- TLSH T18A0352387EE52972E37BEA7585F391C6B974B4223D15990E84CF57440833F62ECA1A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_c5d3561b795d252ef0e0517ffe94d544_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_c5d3561b795d252ef0e0517ffe94d544_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_c5d3561b795d252ef0e0517ffe94d544_cryptolocker_elex
- Size 39KB
- SHA256 02f281a5c52b3a0deb218c3dd6a8ce2072c00e2898726931b958b8ec7f37b297
- MD5 c5d3561b795d252ef0e0517ffe94d544
- SHA1 c3a716fbf070038e970d0a56294aebd1d13282a3
- SHA512 5c9633d6df9467b45c3215b0e540799496c00c30ab638c13d1d519f31efbc81ed6014750d348f66a40133355877fbba1a0dac983ff81c2b69a93983b78725106
- SSDEEP 384:bdDl1ovmXAw9PMDREhi9OUSPlRxMc/cip58TfjDN0g/HNblX7QCOBqYvazTvbqv:bdDOw9Uiaw8fjR0STX73OBqgazTDw
- TLSH T18A0352387EE52972E37BEA7585F391C6B974B4223D15990E84CF57440833F62ECA1A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE