General
- Target 2026-08-20_4aad0e743ed0270de27e3cc95d8d9532_cryptolocker_elex
- Size 26KB
- Sample260820-s2hd3szfpb
- SHA256 3029fdea32b92da758c9dfbce353ab4e8129492c8b5a7aec58ede8b6d36070ca
- MD5 4aad0e743ed0270de27e3cc95d8d9532
- SHA1 59811f86ec36b450ecfd7b5bb2f5e571c4c17fd9
- SHA512 aab5be5f646fd4653500f17b2a51d3a17ecfa3e576b6999f7f483e4675b30b2768083e341d9c06f18b318b67a61505bc582b5f79d61e8485478bc5e918f2ae3e
- SSDEEP 384:b674uGLLQRcsdeQ72ngEr4K7YmE8j60payjfjDnH/:b674zYcgT/Ekd0cqfjzf
- TLSH T1F2C24A357BE73CA1E17A5FB015FBA041797FBC213E38498EACCE7758DA71291A402486
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_4aad0e743ed0270de27e3cc95d8d9532_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_4aad0e743ed0270de27e3cc95d8d9532_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_4aad0e743ed0270de27e3cc95d8d9532_cryptolocker_elex
- Size 26KB
- SHA256 3029fdea32b92da758c9dfbce353ab4e8129492c8b5a7aec58ede8b6d36070ca
- MD5 4aad0e743ed0270de27e3cc95d8d9532
- SHA1 59811f86ec36b450ecfd7b5bb2f5e571c4c17fd9
- SHA512 aab5be5f646fd4653500f17b2a51d3a17ecfa3e576b6999f7f483e4675b30b2768083e341d9c06f18b318b67a61505bc582b5f79d61e8485478bc5e918f2ae3e
- SSDEEP 384:b674uGLLQRcsdeQ72ngEr4K7YmE8j60payjfjDnH/:b674zYcgT/Ekd0cqfjzf
- TLSH T1F2C24A357BE73CA1E17A5FB015FBA041797FBC213E38498EACCE7758DA71291A402486
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE