General
- Target 2026-08-20_6b3ddcb9735095f1b9154082e0d48589_cryptolocker_elex_vidar
- Size 75KB
- Sample260820-prl3qszydx
- SHA256 8a5963ab30eebefc6fe74f9a2b58f1b26900d7a04cd8c9344a9007eade61e991
- MD5 6b3ddcb9735095f1b9154082e0d48589
- SHA1 efe64326da2272847145f41e25e2fca4de6e840e
- SHA512 1f98cddca04c3d4cc10ec6b1d2fe615d9c587583c27c08e852ef12ef6949bc43a7111e46f9e88d227a0ceecb45884b4ead7dcc06f85d6c2787b7c1b1f11828a4
- SSDEEP 768:bCNQIE0eBhkL2Fo1CCwgfjOgFXifkAeWwQEhFGXkXif4CbPQ7n:bCNrC7kYo1FxfFX+zelPX+4CbQ7n
- TLSH T1447311396ED515A2D6778AB48EF2038669347D923B074EBF108B3384C932ED3AC6175D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-20_6b3ddcb9735095f1b9154082e0d48589_cryptolocker_elex_vidar.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_6b3ddcb9735095f1b9154082e0d48589_cryptolocker_elex_vidar.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_6b3ddcb9735095f1b9154082e0d48589_cryptolocker_elex_vidar
- Size 75KB
- SHA256 8a5963ab30eebefc6fe74f9a2b58f1b26900d7a04cd8c9344a9007eade61e991
- MD5 6b3ddcb9735095f1b9154082e0d48589
- SHA1 efe64326da2272847145f41e25e2fca4de6e840e
- SHA512 1f98cddca04c3d4cc10ec6b1d2fe615d9c587583c27c08e852ef12ef6949bc43a7111e46f9e88d227a0ceecb45884b4ead7dcc06f85d6c2787b7c1b1f11828a4
- SSDEEP 768:bCNQIE0eBhkL2Fo1CCwgfjOgFXifkAeWwQEhFGXkXif4CbPQ7n:bCNrC7kYo1FxfFX+zelPX+4CbQ7n
- TLSH T1447311396ED515A2D6778AB48EF2038669347D923B074EBF108B3384C932ED3AC6175D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables packed with VMProtect.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE