General
- Target 2026-08-20_0f168b7bb28feb2c4f727efc0165a6a4_cryptolocker_elex
- Size 32KB
- Sample260820-kqfr4swvas
- SHA256 2cf5eee59af0962d26f19080698f6933250e756f4a0b43fde23cf3a2b6114829
- MD5 0f168b7bb28feb2c4f727efc0165a6a4
- SHA1 933fbd4bbdce35923ee1cab6fc742723a75e7793
- SHA512 69eefe3cd474a44179655c1657cab3ca99dc78ff2442ddcff0d6e9a5b0f599935cd3896d1c4828c30c63a699ea7cc06437c9db42dc36bdfa872d7d9bd6bedbcf
- SSDEEP 384:b674uGLLQRcsdeQ72ngEr4K7YmE8j60payjfjDnHMmHBda2VwtDE:b674zYcgT/Ekd0cqfjzsmHBdzqpE
- TLSH T118E2D8347FE72D71E37B9EB556F79082B97AB8223D15880D54CE63488C33B62AC5150E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_0f168b7bb28feb2c4f727efc0165a6a4_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_0f168b7bb28feb2c4f727efc0165a6a4_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_0f168b7bb28feb2c4f727efc0165a6a4_cryptolocker_elex
- Size 32KB
- SHA256 2cf5eee59af0962d26f19080698f6933250e756f4a0b43fde23cf3a2b6114829
- MD5 0f168b7bb28feb2c4f727efc0165a6a4
- SHA1 933fbd4bbdce35923ee1cab6fc742723a75e7793
- SHA512 69eefe3cd474a44179655c1657cab3ca99dc78ff2442ddcff0d6e9a5b0f599935cd3896d1c4828c30c63a699ea7cc06437c9db42dc36bdfa872d7d9bd6bedbcf
- SSDEEP 384:b674uGLLQRcsdeQ72ngEr4K7YmE8j60payjfjDnHMmHBda2VwtDE:b674zYcgT/Ekd0cqfjzsmHBdzqpE
- TLSH T118E2D8347FE72D71E37B9EB556F79082B97AB8223D15880D54CE63488C33B62AC5150E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE