General
- Target 2026-08-20_37185e63be41babfacab0454b98da326_cryptolocker_elex
- Size 25KB
- Sample260820-xwbrkaxtas
- SHA256 0f3651cb8f03570e4d5693151e74b74ed6140893a82bc685eab1f3d1c97291e8
- MD5 37185e63be41babfacab0454b98da326
- SHA1 69ea334cb9fb64fd542c0f635058a9ff438d64ba
- SHA512 694d006bd3060505f483f748bfd5d03f874142e4bcad8af28de86d7bc73db6769420cbe29ecf6056dfa617a729906b1beae21fba749eb8537cb631853451492d
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUCmBWFF:bA74zYcgT/Ekd0ryfjbeWFF
- TLSH T1C5C24B3577A77CA1D0695EB025FBA102797FBC513B38498FACCF77ACDAB12916402086
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_37185e63be41babfacab0454b98da326_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_37185e63be41babfacab0454b98da326_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_37185e63be41babfacab0454b98da326_cryptolocker_elex
- Size 25KB
- SHA256 0f3651cb8f03570e4d5693151e74b74ed6140893a82bc685eab1f3d1c97291e8
- MD5 37185e63be41babfacab0454b98da326
- SHA1 69ea334cb9fb64fd542c0f635058a9ff438d64ba
- SHA512 694d006bd3060505f483f748bfd5d03f874142e4bcad8af28de86d7bc73db6769420cbe29ecf6056dfa617a729906b1beae21fba749eb8537cb631853451492d
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUCmBWFF:bA74zYcgT/Ekd0ryfjbeWFF
- TLSH T1C5C24B3577A77CA1D0695EB025FBA102797FBC513B38498FACCF77ACDAB12916402086
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE