General
- Target 2026-08-20_581dbb97cae9694cc88a24ff4adb2655_cryptolocker_elex
- Size 40KB
- Sample260820-wfhphawsaw
- SHA256 87d052e956513756688df9f635773765e5d5e6dfe5db70f5d2409e599bc7be13
- MD5 581dbb97cae9694cc88a24ff4adb2655
- SHA1 40a9e40c713e4b87d43239ad770092639477a9f6
- SHA512 99597012a46b44a6965b84a07c94783b1be30b27c702fe0ae38f6d185ddc906f5400ae4bbb5a423002cccf94ae117edfae1a536e4e5ed14ad9a098e431a2ec3d
- SSDEEP 768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAn/:bCDOw9aMDooc+vA/
- TLSH T196032F396BD4F772D277BA7584F241D2A8E079123B14C82D7ECE5347A822A3EBD5120D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_581dbb97cae9694cc88a24ff4adb2655_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_581dbb97cae9694cc88a24ff4adb2655_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_581dbb97cae9694cc88a24ff4adb2655_cryptolocker_elex
- Size 40KB
- SHA256 87d052e956513756688df9f635773765e5d5e6dfe5db70f5d2409e599bc7be13
- MD5 581dbb97cae9694cc88a24ff4adb2655
- SHA1 40a9e40c713e4b87d43239ad770092639477a9f6
- SHA512 99597012a46b44a6965b84a07c94783b1be30b27c702fe0ae38f6d185ddc906f5400ae4bbb5a423002cccf94ae117edfae1a536e4e5ed14ad9a098e431a2ec3d
- SSDEEP 768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAn/:bCDOw9aMDooc+vA/
- TLSH T196032F396BD4F772D277BA7584F241D2A8E079123B14C82D7ECE5347A822A3EBD5120D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE