General
- Target 2026-08-20_085e0d75c5d069001296246a7e452792_cryptolocker_elex_vidar
- Size 73KB
- Sample260820-h7h8fssbrg
- SHA256 8156a7925f4c32b9c830cda6f146a0f3259e9e896fb0e695a34d4de3a3962a91
- MD5 085e0d75c5d069001296246a7e452792
- SHA1 ea2da1f15a0db1ad18c59c5b3caf960227735a37
- SHA512 d65c4707adbfa978fdf0210af9217826129ce89529e80455d24d4990568afdef919a1328ccac37217481a5aa555623ad16099f887ef7b05cafbcb8221e6e2fe4
- SSDEEP 768:bCNQIE0eBhkL2Fo1CCwgfjOgFXifkAeWwQEhFGXkXif4CbPQ7sd:bCNrC7kYo1FxfFX+zelPX+4CbQ7sd
- TLSH T1C37311357ED519A1D6778AB48EF2038669347D923B074EBF108B3284C932ED3ACB1759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-20_085e0d75c5d069001296246a7e452792_cryptolocker_elex_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_085e0d75c5d069001296246a7e452792_cryptolocker_elex_vidar.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_085e0d75c5d069001296246a7e452792_cryptolocker_elex_vidar
- Size 73KB
- SHA256 8156a7925f4c32b9c830cda6f146a0f3259e9e896fb0e695a34d4de3a3962a91
- MD5 085e0d75c5d069001296246a7e452792
- SHA1 ea2da1f15a0db1ad18c59c5b3caf960227735a37
- SHA512 d65c4707adbfa978fdf0210af9217826129ce89529e80455d24d4990568afdef919a1328ccac37217481a5aa555623ad16099f887ef7b05cafbcb8221e6e2fe4
- SSDEEP 768:bCNQIE0eBhkL2Fo1CCwgfjOgFXifkAeWwQEhFGXkXif4CbPQ7sd:bCNrC7kYo1FxfFX+zelPX+4CbQ7sd
- TLSH T1C37311357ED519A1D6778AB48EF2038669347D923B074EBF108B3284C932ED3ACB1759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables packed with VMProtect.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE