General
- Target 2026-08-19_714058a761b3a08373399218b321cd07_cryptolocker_elex_vidar
- Size 73KB
- Sample260820-ajyz1aad97
- SHA256 e98ef82e5de7a703eca4b34d2c84beeb894d474e1384afb6185963610875484d
- MD5 714058a761b3a08373399218b321cd07
- SHA1 e1631eec6c55e05481ec3a4951fcdf97af022d46
- SHA512 451be1ddc4590e052acd8b4a5d019db08427bfb0006cf10c66ef41210801989e1abe445a5ef329a5ce71ee8e659f911a3513250fec721a9417035fcb794772e0
- SSDEEP 768:bCNQIE0eBhkL2Fo1CCwgfjOgFXifkAeWwQEhFGXkXif4CbPQ7sL:bCNrC7kYo1FxfFX+zelPX+4CbQ7sL
- TLSH T1617311357ED519A1D6778AB48EF2038669347D923B074EBF108B3284C932ED3ACB1759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-19_714058a761b3a08373399218b321cd07_cryptolocker_elex_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_714058a761b3a08373399218b321cd07_cryptolocker_elex_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_714058a761b3a08373399218b321cd07_cryptolocker_elex_vidar
- Size 73KB
- SHA256 e98ef82e5de7a703eca4b34d2c84beeb894d474e1384afb6185963610875484d
- MD5 714058a761b3a08373399218b321cd07
- SHA1 e1631eec6c55e05481ec3a4951fcdf97af022d46
- SHA512 451be1ddc4590e052acd8b4a5d019db08427bfb0006cf10c66ef41210801989e1abe445a5ef329a5ce71ee8e659f911a3513250fec721a9417035fcb794772e0
- SSDEEP 768:bCNQIE0eBhkL2Fo1CCwgfjOgFXifkAeWwQEhFGXkXif4CbPQ7sL:bCNrC7kYo1FxfFX+zelPX+4CbQ7sL
- TLSH T1617311357ED519A1D6778AB48EF2038669347D923B074EBF108B3284C932ED3ACB1759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables packed with VMProtect.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE