General
- Target 2026-08-20_bda9bfdf12b3f5fefae77d0517b524f9_cryptolocker_elex_vidar
- Size 74KB
- Sample260820-hlan7atzg1
- SHA256 d19d35cfe042b154e267580bdcf40af45e36bbe4f9c7ef31ff2a3438a0af1253
- MD5 bda9bfdf12b3f5fefae77d0517b524f9
- SHA1 505735af4d7512934d5e393236dc600cccc19fe5
- SHA512 acb7bfb73e49ecb216d1df33144d82ccc6cbed1a9f35a1098432671ae4c8f527972ccadc38f13c3c58ccd07978319853b3dda64beff7f7da33d5c732d5e32691
- SSDEEP 768:bCNQIE0eBhkL2Fo1CCwgfjOgFXifkAeWwQEhFGXkXif4CbPQ7sN:bCNrC7kYo1FxfFX+zelPX+4CbQ7sN
- TLSH T1747311357ED519A1D6778AB48EF2038669347D923B074EBF108B3284C932ED3ACB1759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-20_bda9bfdf12b3f5fefae77d0517b524f9_cryptolocker_elex_vidar.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_bda9bfdf12b3f5fefae77d0517b524f9_cryptolocker_elex_vidar.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_bda9bfdf12b3f5fefae77d0517b524f9_cryptolocker_elex_vidar
- Size 74KB
- SHA256 d19d35cfe042b154e267580bdcf40af45e36bbe4f9c7ef31ff2a3438a0af1253
- MD5 bda9bfdf12b3f5fefae77d0517b524f9
- SHA1 505735af4d7512934d5e393236dc600cccc19fe5
- SHA512 acb7bfb73e49ecb216d1df33144d82ccc6cbed1a9f35a1098432671ae4c8f527972ccadc38f13c3c58ccd07978319853b3dda64beff7f7da33d5c732d5e32691
- SSDEEP 768:bCNQIE0eBhkL2Fo1CCwgfjOgFXifkAeWwQEhFGXkXif4CbPQ7sN:bCNrC7kYo1FxfFX+zelPX+4CbQ7sN
- TLSH T1747311357ED519A1D6778AB48EF2038669347D923B074EBF108B3284C932ED3ACB1759
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables packed with VMProtect.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE