General
- Target 2026-08-20_a7a5f50282c855de242a430c36d1f320_cryptolocker_elex
- Size 37KB
- Sample260820-xknxratelb
- SHA256 ce7905f89655a3049c9aede993de2ca7bd5959430605e4ffc224c1b2964e07a8
- MD5 a7a5f50282c855de242a430c36d1f320
- SHA1 ae48c8e42bbcc78d49d4bcd97ffd8e97bcf7afbe
- SHA512 8b87b63bb2edbbff72792f7fcf838f646bc4e674b571e2f88b9dd1d846b305997d29a649731237a95d10f90e45c3738d647cee437dec0729d232bf30dee4d85d
- SSDEEP 384:bdDl1ovmXAw9PMDREhi9OUSPlRxMc/cip58TfjDN0g/HNblX7QCOBqYvazAyt:bdDOw9Uiaw8fjR0STX73OBqgazAyt
- TLSH T1B80373387EE52972E37BEB7185F391C2B874B8127D15890E94CE67440833F62EC61A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_a7a5f50282c855de242a430c36d1f320_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_a7a5f50282c855de242a430c36d1f320_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_a7a5f50282c855de242a430c36d1f320_cryptolocker_elex
- Size 37KB
- SHA256 ce7905f89655a3049c9aede993de2ca7bd5959430605e4ffc224c1b2964e07a8
- MD5 a7a5f50282c855de242a430c36d1f320
- SHA1 ae48c8e42bbcc78d49d4bcd97ffd8e97bcf7afbe
- SHA512 8b87b63bb2edbbff72792f7fcf838f646bc4e674b571e2f88b9dd1d846b305997d29a649731237a95d10f90e45c3738d647cee437dec0729d232bf30dee4d85d
- SSDEEP 384:bdDl1ovmXAw9PMDREhi9OUSPlRxMc/cip58TfjDN0g/HNblX7QCOBqYvazAyt:bdDOw9Uiaw8fjR0STX73OBqgazAyt
- TLSH T1B80373387EE52972E37BEB7185F391C2B874B8127D15890E94CE67440833F62EC61A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE