General
- Target 2026-08-20_875a68e9b16da6b8fe7d1237c28de4ce_cryptolocker_elex
- Size 29KB
- Sample260820-bhjdlacp8z
- SHA256 396e4a298e33241a14ccd780e0343bfe92b653f8cb32f5eb1f1bfb094644853c
- MD5 875a68e9b16da6b8fe7d1237c28de4ce
- SHA1 969da5e2b497f6d16d7478336b3a65ac46550092
- SHA512 04cf0b1a6526a9fa8d48b60e44f8e49a0b406cc9c49ba7e52b3ceea1ffd6be96bec876440ebe4562204a78b1d109ce007dcfd4d59d6ba7b84c2a327d1afbe9fa
- SSDEEP 384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/Xfa4eZv+r:bIDOw9UiaCHfjnE0SfaLYr
- TLSH T1CCD2E739BEE52C72E1777B7554F39282E875BD023A28494F98CF73890931E56BC5210D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_875a68e9b16da6b8fe7d1237c28de4ce_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_875a68e9b16da6b8fe7d1237c28de4ce_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_875a68e9b16da6b8fe7d1237c28de4ce_cryptolocker_elex
- Size 29KB
- SHA256 396e4a298e33241a14ccd780e0343bfe92b653f8cb32f5eb1f1bfb094644853c
- MD5 875a68e9b16da6b8fe7d1237c28de4ce
- SHA1 969da5e2b497f6d16d7478336b3a65ac46550092
- SHA512 04cf0b1a6526a9fa8d48b60e44f8e49a0b406cc9c49ba7e52b3ceea1ffd6be96bec876440ebe4562204a78b1d109ce007dcfd4d59d6ba7b84c2a327d1afbe9fa
- SSDEEP 384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/Xfa4eZv+r:bIDOw9UiaCHfjnE0SfaLYr
- TLSH T1CCD2E739BEE52C72E1777B7554F39282E875BD023A28494F98CF73890931E56BC5210D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE