General
- Target 2026-08-20_f41ce402cccaaaa3f98e8316922b5432_cryptolocker_elex
- Size 38KB
- Sample260820-rfqyna11bt
- SHA256 1f84358bb7cc08f601fbebab2c390d88b47b3e8ff01da84964a4f95f80cad482
- MD5 f41ce402cccaaaa3f98e8316922b5432
- SHA1 53f4b93ef7ec279bc916c8066943f7923dc6afb0
- SHA512 e3672c41500d1082fcf627897cc1323b33220e49351f4e9c28e6c0b919522f73914bd287aa962f1bef18a5101e51d9e0c46c9699b4b09a52a9e4e5a9e202e9a8
- SSDEEP 384:bdDl1ovmXAw9PMDREhi9OUSPlRxMc/cip58TfjDN0g/HNblX7QCOBqYvaz+d:bdDOw9Uiaw8fjR0STX73OBqgaz+d
- TLSH T1AA0363387EE52972E37BEB7585F391C6B874B8227D15890E94CE57440833F62EC61A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_f41ce402cccaaaa3f98e8316922b5432_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_f41ce402cccaaaa3f98e8316922b5432_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_f41ce402cccaaaa3f98e8316922b5432_cryptolocker_elex
- Size 38KB
- SHA256 1f84358bb7cc08f601fbebab2c390d88b47b3e8ff01da84964a4f95f80cad482
- MD5 f41ce402cccaaaa3f98e8316922b5432
- SHA1 53f4b93ef7ec279bc916c8066943f7923dc6afb0
- SHA512 e3672c41500d1082fcf627897cc1323b33220e49351f4e9c28e6c0b919522f73914bd287aa962f1bef18a5101e51d9e0c46c9699b4b09a52a9e4e5a9e202e9a8
- SSDEEP 384:bdDl1ovmXAw9PMDREhi9OUSPlRxMc/cip58TfjDN0g/HNblX7QCOBqYvaz+d:bdDOw9Uiaw8fjR0STX73OBqgaz+d
- TLSH T1AA0363387EE52972E37BEB7585F391C6B874B8227D15890E94CE57440833F62EC61A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE