General
- Target 2026-08-19_7abbdb08e59ca4d3aa66461e4511e3f2_cryptolocker_elex_vidar
- Size 73KB
- Sample260820-b3cfsadj8x
- SHA256 dc3e781068452516ebaafc1301c4ddb718d2cb82efb8a13e8d775fa58377cb05
- MD5 7abbdb08e59ca4d3aa66461e4511e3f2
- SHA1 1125c37c9f832a34436a02123586632415da9092
- SHA512 9a9dd25072a12456230e809455c4b8592541704f3126308177dc3a4079ff86ce0cec46cbd28dba3eb6fff5ab304a334690e31f48c7d6dc167917f1dde87073c9
- SSDEEP 768:bCNQIE0eBhkL2Fo1CCwgfjOgFXifkAeWwQEhFGXkXif4CbPQ7s5:bCNrC7kYo1FxfFX+zelPX+4CbQ7s5
- TLSH T1BE7311357ED519A1D6778AB48EF2038669347D923B074EBF108B3284C932ED3ACB1759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-19_7abbdb08e59ca4d3aa66461e4511e3f2_cryptolocker_elex_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_7abbdb08e59ca4d3aa66461e4511e3f2_cryptolocker_elex_vidar.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_7abbdb08e59ca4d3aa66461e4511e3f2_cryptolocker_elex_vidar
- Size 73KB
- SHA256 dc3e781068452516ebaafc1301c4ddb718d2cb82efb8a13e8d775fa58377cb05
- MD5 7abbdb08e59ca4d3aa66461e4511e3f2
- SHA1 1125c37c9f832a34436a02123586632415da9092
- SHA512 9a9dd25072a12456230e809455c4b8592541704f3126308177dc3a4079ff86ce0cec46cbd28dba3eb6fff5ab304a334690e31f48c7d6dc167917f1dde87073c9
- SSDEEP 768:bCNQIE0eBhkL2Fo1CCwgfjOgFXifkAeWwQEhFGXkXif4CbPQ7s5:bCNrC7kYo1FxfFX+zelPX+4CbQ7s5
- TLSH T1BE7311357ED519A1D6778AB48EF2038669347D923B074EBF108B3284C932ED3ACB1759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables packed with VMProtect.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE