General
- Target 2026-08-20_f8cf8364e21043bec053cdb824ff268f_cryptolocker_elex
- Size 56KB
- Sample260820-dhj18sbb33
- SHA256 2e7c9853b3caa1575a9a9870a6c57d11d721af9a6920ebb2f7b8bef44f007d9e
- MD5 f8cf8364e21043bec053cdb824ff268f
- SHA1 47fec9fc6ce4aa24dd71f00dec17de84730d92c4
- SHA512 81c223f2e4c5d5a6949a6a10d73c99a786b66716e0942a13c29ea6d72491c823c87135fd1e19bb8acb755d55ee807b23191f1d0e142a942a58ab0ec86022138b
- SSDEEP 768:br74zYcgT/Ekd0ryfjXaoP+NSBz1EXEl5EyKaIZsIunqpeNswmQaT:br6YcA/X6GLadNSBBSm5zI/W1G
- TLSH T14D4308397FD62A72D3778AB195F790C3BD3AB82239158C0D44CE53484933F56AD92A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_f8cf8364e21043bec053cdb824ff268f_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_f8cf8364e21043bec053cdb824ff268f_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_f8cf8364e21043bec053cdb824ff268f_cryptolocker_elex
- Size 56KB
- SHA256 2e7c9853b3caa1575a9a9870a6c57d11d721af9a6920ebb2f7b8bef44f007d9e
- MD5 f8cf8364e21043bec053cdb824ff268f
- SHA1 47fec9fc6ce4aa24dd71f00dec17de84730d92c4
- SHA512 81c223f2e4c5d5a6949a6a10d73c99a786b66716e0942a13c29ea6d72491c823c87135fd1e19bb8acb755d55ee807b23191f1d0e142a942a58ab0ec86022138b
- SSDEEP 768:br74zYcgT/Ekd0ryfjXaoP+NSBz1EXEl5EyKaIZsIunqpeNswmQaT:br6YcA/X6GLadNSBBSm5zI/W1G
- TLSH T14D4308397FD62A72D3778AB195F790C3BD3AB82239158C0D44CE53484933F56AD92A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE