General
- Target 2026-08-20_a4028e493d3a58934eadeac493eb9603_cryptolocker_elex
- Size 36KB
- Sample260820-ntv8rawcng
- SHA256 997de6f62efceee7dcd108ccac2676e88b00c409bb676e650d354133106120a4
- MD5 a4028e493d3a58934eadeac493eb9603
- SHA1 895c4691c4d3de58316dc96f0d85750e86f7623c
- SHA512 526afcd2094b0b05d481ab07d46521581c5a6e23c0f6eb8000ae69f2b7c0ffd4bf938e5c678cde081f3ba40696142303491aeebb44d21fb1d775ac8aa040ac27
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUuDzaNYqAy/YjyAFkt5ChX0c:bA74zYcgT/Ekd0ryfjLzViYuAKc
- TLSH T121F295386BD62972D3BBCEB595F751C2B935B8233E158C0E54CB23884D32B62EC5261D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_a4028e493d3a58934eadeac493eb9603_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_a4028e493d3a58934eadeac493eb9603_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_a4028e493d3a58934eadeac493eb9603_cryptolocker_elex
- Size 36KB
- SHA256 997de6f62efceee7dcd108ccac2676e88b00c409bb676e650d354133106120a4
- MD5 a4028e493d3a58934eadeac493eb9603
- SHA1 895c4691c4d3de58316dc96f0d85750e86f7623c
- SHA512 526afcd2094b0b05d481ab07d46521581c5a6e23c0f6eb8000ae69f2b7c0ffd4bf938e5c678cde081f3ba40696142303491aeebb44d21fb1d775ac8aa040ac27
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUuDzaNYqAy/YjyAFkt5ChX0c:bA74zYcgT/Ekd0ryfjLzViYuAKc
- TLSH T121F295386BD62972D3BBCEB595F751C2B935B8233E158C0E54CB23884D32B62EC5261D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE