General
- Target 2026-08-20_9ddae76ac3ef36c7765df8e65d32dbfd_cryptolocker_elex
- Size 25KB
- Sample260820-xlh3wstemf
- SHA256 2ed3dc1422bba06bade58080c879feaf57bdaf6c5af1e893f13d39337fbd25e6
- MD5 9ddae76ac3ef36c7765df8e65d32dbfd
- SHA1 f2de477552530cd13857ef7740d850c9f25cb859
- SHA512 882aee566350329aa81d6a7a0d6e11b8c786cd0784ff982ceb9b5de73fad557319174fad78fc9f4bdd89419ee72a9114b6a732b8693f929a24bf6627dfcb96f0
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUaBlwN:bA74zYcgT/Ekd0ryfjVI
- TLSH T1C1C24B2677677CA2D0695EB025FBA011797FBD513B38498FBCCF73ACDAB12916402086
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_9ddae76ac3ef36c7765df8e65d32dbfd_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_9ddae76ac3ef36c7765df8e65d32dbfd_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_9ddae76ac3ef36c7765df8e65d32dbfd_cryptolocker_elex
- Size 25KB
- SHA256 2ed3dc1422bba06bade58080c879feaf57bdaf6c5af1e893f13d39337fbd25e6
- MD5 9ddae76ac3ef36c7765df8e65d32dbfd
- SHA1 f2de477552530cd13857ef7740d850c9f25cb859
- SHA512 882aee566350329aa81d6a7a0d6e11b8c786cd0784ff982ceb9b5de73fad557319174fad78fc9f4bdd89419ee72a9114b6a732b8693f929a24bf6627dfcb96f0
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUaBlwN:bA74zYcgT/Ekd0ryfjVI
- TLSH T1C1C24B2677677CA2D0695EB025FBA011797FBD513B38498FBCCF73ACDAB12916402086
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE