General

  • Target
    2026-08-20_bda9bfdf12b3f5fefae77d0517b524f9_cryptolocker_elex_vidar
  • Size 74KB
  • Sample260820-hlan7atzg1
  • SHA256 d19d35cfe042b154e267580bdcf40af45e36bbe4f9c7ef31ff2a3438a0af1253
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026-08-20_bda9bfdf12b3f5fefae77d0517b524f9_cryptolocker_elex_vidar
    • Size 74KB
    • SHA256 d19d35cfe042b154e267580bdcf40af45e36bbe4f9c7ef31ff2a3438a0af1253
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detection of CryptoLocker Variants

    • Detects executables packed with VMProtect.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks