General
- Target 2026-08-20_9e0ee982969d6ec220c670ff689c6fb8_cryptolocker_elex
- Size 30KB
- Sample260820-kmdhkshj9v
- SHA256 6f1c325bc7a3065cf49414093870194df7d9999f9576d110734b95652bf76015
- MD5 9e0ee982969d6ec220c670ff689c6fb8
- SHA1 9709ba3bc4021e8948ea1b222660ce828fdb3afb
- SHA512 453e6b9dbf8aabab82e46ef0b357a04c3f078648d733a3de45fe3c4418e16c656ac053d44b6091739cbce388fac0737a774b6d0460395563f02669cc0b1af63f
- SSDEEP 384:b674uGLLQRcsdeQ72ngEr4K7YmE8j60payjfjDnHMmHBda1:b674zYcgT/Ekd0cqfjzsmHBd8
- TLSH T1C6D2F9347BE72C71E33B9E7456F79082B97ABC223E25484E58CE73488973792AC4154E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_9e0ee982969d6ec220c670ff689c6fb8_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_9e0ee982969d6ec220c670ff689c6fb8_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_9e0ee982969d6ec220c670ff689c6fb8_cryptolocker_elex
- Size 30KB
- SHA256 6f1c325bc7a3065cf49414093870194df7d9999f9576d110734b95652bf76015
- MD5 9e0ee982969d6ec220c670ff689c6fb8
- SHA1 9709ba3bc4021e8948ea1b222660ce828fdb3afb
- SHA512 453e6b9dbf8aabab82e46ef0b357a04c3f078648d733a3de45fe3c4418e16c656ac053d44b6091739cbce388fac0737a774b6d0460395563f02669cc0b1af63f
- SSDEEP 384:b674uGLLQRcsdeQ72ngEr4K7YmE8j60payjfjDnHMmHBda1:b674zYcgT/Ekd0cqfjzsmHBd8
- TLSH T1C6D2F9347BE72C71E33B9E7456F79082B97ABC223E25484E58CE73488973792AC4154E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE