General
- Target 2026-08-20_e209310af62722164f9bab6f42fc14be_cryptolocker_elex
- Size 30KB
- Sample260820-nbfeksar7v
- SHA256 8319fdbfb23f4ebe74230e80ffdfb8bab4c7e7f2d268eb11c2c24842c3e08bb4
- MD5 e209310af62722164f9bab6f42fc14be
- SHA1 29d39ad6f3c29b58638250ec0dd3e465ec58573c
- SHA512 d94d170302cbe356304e01769d7a6c78520969377d862d8731db1cd4a6a189855ed34484b5ca189cf8677031b89c559ce3857fed9a4cb8697724893d6aac9132
- SSDEEP 384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/Xf4LlkTKaEp7xA1f4:bIDOw9UiaCHfjnE0Sf8daAFAu
- TLSH T165E2C739BEE56872E277AB7154F39182A875BD523E24494E98CF73880932F53FC6210D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_e209310af62722164f9bab6f42fc14be_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_e209310af62722164f9bab6f42fc14be_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_e209310af62722164f9bab6f42fc14be_cryptolocker_elex
- Size 30KB
- SHA256 8319fdbfb23f4ebe74230e80ffdfb8bab4c7e7f2d268eb11c2c24842c3e08bb4
- MD5 e209310af62722164f9bab6f42fc14be
- SHA1 29d39ad6f3c29b58638250ec0dd3e465ec58573c
- SHA512 d94d170302cbe356304e01769d7a6c78520969377d862d8731db1cd4a6a189855ed34484b5ca189cf8677031b89c559ce3857fed9a4cb8697724893d6aac9132
- SSDEEP 384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/Xf4LlkTKaEp7xA1f4:bIDOw9UiaCHfjnE0Sf8daAFAu
- TLSH T165E2C739BEE56872E277AB7154F39182A875BD523E24494E98CF73880932F53FC6210D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE