General
- Target 2026-08-19_1ff30e11fe50a25aa79377700027960d_cryptolocker_elex
- Size 56KB
- Sample260820-ccnlssdl7v
- SHA256 d226a3649189cf7d124fbfa0878a98e474e1ae7cb381b9e280f1ad05d6d8ecf2
- MD5 1ff30e11fe50a25aa79377700027960d
- SHA1 d8081d78c1ef57213398a8481154206df7c9512e
- SHA512 7cf5d321f9bf764465dfdb4b5393567863dd69fcd4636de6b7b40a2542db36943d830a2ad7cf5791bc1d5874bf86c44f4108a82c5b79a82a12088722848d12b7
- SSDEEP 768:br74zYcgT/Ekd0ryfjXaoP+NSBz1EXEl5EyKaIZsIunqpeNswmS:br6YcA/X6GLadNSBBSm5zI/W1X
- TLSH T18343F8397FD62A72D3778AB195F791C3B93AB83239158C0D44CE13484933F52ADA290E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-19_1ff30e11fe50a25aa79377700027960d_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-19_1ff30e11fe50a25aa79377700027960d_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-19_1ff30e11fe50a25aa79377700027960d_cryptolocker_elex
- Size 56KB
- SHA256 d226a3649189cf7d124fbfa0878a98e474e1ae7cb381b9e280f1ad05d6d8ecf2
- MD5 1ff30e11fe50a25aa79377700027960d
- SHA1 d8081d78c1ef57213398a8481154206df7c9512e
- SHA512 7cf5d321f9bf764465dfdb4b5393567863dd69fcd4636de6b7b40a2542db36943d830a2ad7cf5791bc1d5874bf86c44f4108a82c5b79a82a12088722848d12b7
- SSDEEP 768:br74zYcgT/Ekd0ryfjXaoP+NSBz1EXEl5EyKaIZsIunqpeNswmS:br6YcA/X6GLadNSBBSm5zI/W1X
- TLSH T18343F8397FD62A72D3778AB195F791C3B93AB83239158C0D44CE13484933F52ADA290E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE