General
- Target 2026-08-20_2b1a192806cf431bf2de49e725e98bf1_cryptolocker_elex
- Size 35KB
- Sample260820-blqxvaag55
- SHA256 ede18060ef6f309986bf1474d5dccb43eeb438ee2f8a982033bca95ef1f5916f
- MD5 2b1a192806cf431bf2de49e725e98bf1
- SHA1 bf3cae2bdcf2481b4b828b922737a9ea1f0c461f
- SHA512 b1f854ed4b39bd7ba42601dec4ddd95b3420a81e698db58ff244989900173260e867f84f00c2a332541e37d78a4e425f3bd78bd455f0f2f39f4bc9f72e524452
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJXTQke48JSJjLftLU42:bA74zYcgT/Ekd0ryfjQRSNh8JSJPtu
- TLSH T174F2A7386BD66972D377CE7185F79186B935B8223B1548CF58CA23448D33BD2ACB150E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_2b1a192806cf431bf2de49e725e98bf1_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_2b1a192806cf431bf2de49e725e98bf1_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_2b1a192806cf431bf2de49e725e98bf1_cryptolocker_elex
- Size 35KB
- SHA256 ede18060ef6f309986bf1474d5dccb43eeb438ee2f8a982033bca95ef1f5916f
- MD5 2b1a192806cf431bf2de49e725e98bf1
- SHA1 bf3cae2bdcf2481b4b828b922737a9ea1f0c461f
- SHA512 b1f854ed4b39bd7ba42601dec4ddd95b3420a81e698db58ff244989900173260e867f84f00c2a332541e37d78a4e425f3bd78bd455f0f2f39f4bc9f72e524452
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUr766SJXTQke48JSJjLftLU42:bA74zYcgT/Ekd0ryfjQRSNh8JSJPtu
- TLSH T174F2A7386BD66972D377CE7185F79186B935B8223B1548CF58CA23448D33BD2ACB150E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE