General
- Target 2026-08-20_d1ade253f6c0988ac1c641813a4d9acc_cryptolocker_elex
- Size 26KB
- Sample260820-xfla3atdka
- SHA256 6a5032ca02676b0f50cd00fbd792a920dcca9ef77666d23b96607e0c4635f980
- MD5 d1ade253f6c0988ac1c641813a4d9acc
- SHA1 26f7ec9016f588bf9abb8051ab258743fe8ed2fa
- SHA512 54444c443d2eb07d39e2457ad182b36d70a889f1fa8bfed2ae061d1673e3ab1e58bc116206b7ee839378537bb5445424790f503c341cd6533531cc8d2f0231b5
- SSDEEP 384:9Dl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4KOQU:9DOw9UiaCHfjnfU
- TLSH T1D5C21A31BEEA6C22F17B7B7010B792559879BD403F38458FECCFB7980671962E82150A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_d1ade253f6c0988ac1c641813a4d9acc_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_d1ade253f6c0988ac1c641813a4d9acc_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_d1ade253f6c0988ac1c641813a4d9acc_cryptolocker_elex
- Size 26KB
- SHA256 6a5032ca02676b0f50cd00fbd792a920dcca9ef77666d23b96607e0c4635f980
- MD5 d1ade253f6c0988ac1c641813a4d9acc
- SHA1 26f7ec9016f588bf9abb8051ab258743fe8ed2fa
- SHA512 54444c443d2eb07d39e2457ad182b36d70a889f1fa8bfed2ae061d1673e3ab1e58bc116206b7ee839378537bb5445424790f503c341cd6533531cc8d2f0231b5
- SSDEEP 384:9Dl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4KOQU:9DOw9UiaCHfjnfU
- TLSH T1D5C21A31BEEA6C22F17B7B7010B792559879BD403F38458FECCFB7980671962E82150A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE