General
- Target 2026-08-20_a6351e1fc9fdf9466ccd56932a8a97c8_cryptolocker_elex
- Size 37KB
- Sample260820-r9gbbazand
- SHA256 ed2fd870036e62cb2758fba7b12098731b3cca2dfa81faf3f0976e4bc0478e91
- MD5 a6351e1fc9fdf9466ccd56932a8a97c8
- SHA1 d831d8ed80e71975a56f3ece195b6b2716c2525d
- SHA512 cee38e5a0ae7629c7bdab5b6b60add649e8d3a3012852355cd95bca98d6ae21000a50be45168a3264e755f8efb78254fd20b4a8064c231b516ac881a496972a2
- SSDEEP 384:bdDl1ovmXAw9PMDREhi9OUSPlRxMc/cip58TfjDN0g/HNblX7QCOBqYvaz+g:bdDOw9Uiaw8fjR0STX73OBqgaz+g
- TLSH T1A30353387EE52972E37BEB7585F391C6B874B8227D15890E94CE57440833F62EC61A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_a6351e1fc9fdf9466ccd56932a8a97c8_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_a6351e1fc9fdf9466ccd56932a8a97c8_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_a6351e1fc9fdf9466ccd56932a8a97c8_cryptolocker_elex
- Size 37KB
- SHA256 ed2fd870036e62cb2758fba7b12098731b3cca2dfa81faf3f0976e4bc0478e91
- MD5 a6351e1fc9fdf9466ccd56932a8a97c8
- SHA1 d831d8ed80e71975a56f3ece195b6b2716c2525d
- SHA512 cee38e5a0ae7629c7bdab5b6b60add649e8d3a3012852355cd95bca98d6ae21000a50be45168a3264e755f8efb78254fd20b4a8064c231b516ac881a496972a2
- SSDEEP 384:bdDl1ovmXAw9PMDREhi9OUSPlRxMc/cip58TfjDN0g/HNblX7QCOBqYvaz+g:bdDOw9Uiaw8fjR0STX73OBqgaz+g
- TLSH T1A30353387EE52972E37BEB7585F391C6B874B8227D15890E94CE57440833F62EC61A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE