General
- Target 2026-08-20_add92a9e0d5cd6f8ec4a7e9db3afc4b9_cryptolocker_elex
- Size 34KB
- Sample260820-bft3bacp5w
- SHA256 1991b7c7474924b228c3503d1f9acb1c7a139c78364b03b2bb1d294145fc5ed7
- MD5 add92a9e0d5cd6f8ec4a7e9db3afc4b9
- SHA1 52c52e8adbe2e4c39c2a81e444846fbd441fcf88
- SHA512 518f680f2bb985236cb26b94bba9bef9356b649bbeb490c3aae70cd0f107f374ef40c3c9370716433676fcf408a09c6d1292415b816b2ead59deee7fa60154d7
- SSDEEP 768:Hf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGeNEmK/4BX+:/1KhxqwtdgI2MyzNORQtOflIwoHNV2Xj
- TLSH T195F27472AFD515D1E773AAB3F8F792C19627BD255D22850E108A3F440AF3680EDA1D0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-20_add92a9e0d5cd6f8ec4a7e9db3afc4b9_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_add92a9e0d5cd6f8ec4a7e9db3afc4b9_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_add92a9e0d5cd6f8ec4a7e9db3afc4b9_cryptolocker_elex
- Size 34KB
- SHA256 1991b7c7474924b228c3503d1f9acb1c7a139c78364b03b2bb1d294145fc5ed7
- MD5 add92a9e0d5cd6f8ec4a7e9db3afc4b9
- SHA1 52c52e8adbe2e4c39c2a81e444846fbd441fcf88
- SHA512 518f680f2bb985236cb26b94bba9bef9356b649bbeb490c3aae70cd0f107f374ef40c3c9370716433676fcf408a09c6d1292415b816b2ead59deee7fa60154d7
- SSDEEP 768:Hf1K2exg2kBwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGGeNEmK/4BX+:/1KhxqwtdgI2MyzNORQtOflIwoHNV2Xj
- TLSH T195F27472AFD515D1E773AAB3F8F792C19627BD255D22850E108A3F440AF3680EDA1D0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE