General
- Target 2026-08-20_e25039f20aa05b64950508e20e85cf74_cryptolocker_elex
- Size 25KB
- Sample260820-rmgcssdg85
- SHA256 f0da26729784dcda8dd2f3ee0ecba3c522872741befc61edd257989eb804d326
- MD5 e25039f20aa05b64950508e20e85cf74
- SHA1 96eded2ae980feee10e25d712cfbda1c5f056722
- SHA512 ad406ef1d4b298d75e684a2cfa5c00eed89ac069a7d81ef8b9c7ec52337b44c71da289cf824d1a77f304befaf14efb227d55966f43ae175f563c92393ba6d742
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUR+:bA74zYcgT/Ekd0ryfj2+
- TLSH T151C24B2677677C92D0595EB025FBE101797FBC543B38498FBCCE77ACEAB1291A002482
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_e25039f20aa05b64950508e20e85cf74_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_e25039f20aa05b64950508e20e85cf74_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_e25039f20aa05b64950508e20e85cf74_cryptolocker_elex
- Size 25KB
- SHA256 f0da26729784dcda8dd2f3ee0ecba3c522872741befc61edd257989eb804d326
- MD5 e25039f20aa05b64950508e20e85cf74
- SHA1 96eded2ae980feee10e25d712cfbda1c5f056722
- SHA512 ad406ef1d4b298d75e684a2cfa5c00eed89ac069a7d81ef8b9c7ec52337b44c71da289cf824d1a77f304befaf14efb227d55966f43ae175f563c92393ba6d742
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUR+:bA74zYcgT/Ekd0ryfj2+
- TLSH T151C24B2677677C92D0595EB025FBE101797FBC543B38498FBCCE77ACEAB1291A002482
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE