General
- Target 2026-08-20_93384d55755a512871d8bf56aa5df2d7_cryptolocker_elex
- Size 30KB
- Sample260820-cvyvgsdn41
- SHA256 3aa083a7e82b0db91b81a8a529f3ccc6968f19548cf6d24d7305c2b52bb0fe28
- MD5 93384d55755a512871d8bf56aa5df2d7
- SHA1 44f0167c59e0cf7a59ad3f88c442320b0a8c6711
- SHA512 f5780259de94d5ccc63c3c3cd00692626a2108021c375da15497fe23c0f4b94e58a02cf1bf8380e31c7b9ede8b6651d61952b1d6f04c6d145102550fcda7ff9b
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUuDzaNYqApjZvlyH:bA74zYcgT/Ekd0ryfjLzVpdvlo
- TLSH T1DCD2FB387BD73C61D27B9E7555F7A082797ABC223E258C4E58CF33888D32B51AC42549
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_93384d55755a512871d8bf56aa5df2d7_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_93384d55755a512871d8bf56aa5df2d7_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_93384d55755a512871d8bf56aa5df2d7_cryptolocker_elex
- Size 30KB
- SHA256 3aa083a7e82b0db91b81a8a529f3ccc6968f19548cf6d24d7305c2b52bb0fe28
- MD5 93384d55755a512871d8bf56aa5df2d7
- SHA1 44f0167c59e0cf7a59ad3f88c442320b0a8c6711
- SHA512 f5780259de94d5ccc63c3c3cd00692626a2108021c375da15497fe23c0f4b94e58a02cf1bf8380e31c7b9ede8b6651d61952b1d6f04c6d145102550fcda7ff9b
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUuDzaNYqApjZvlyH:bA74zYcgT/Ekd0ryfjLzVpdvlo
- TLSH T1DCD2FB387BD73C61D27B9E7555F7A082797ABC223E258C4E58CF33888D32B51AC42549
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE