General
- Target 2026-08-20_0ef305d90667f445219b0ec02da86e07_cryptolocker_elex
- Size 37KB
- Sample260821-bb663sttfy
- SHA256 d66ec1d09184df89cd15f41ade11d265fe278047d181d701c131a914bbffa37b
- MD5 0ef305d90667f445219b0ec02da86e07
- SHA1 2a6388a42cf7372cc3158a11109119a4ea0c3aa6
- SHA512 3c31a2ad48516521375168bbafbe81ba0255c789cb7347eadacba2fa94f06fbc770e657b2b23471e4112c2ed58d847fe4634a5c8e62f2eb5bc174a8742348352
- SSDEEP 384:bdDl1ovmXAw9PMDREhi9OUSPlRxMc/cip58TfjDN0g/HNblX7QCOBqYvaz+j:bdDOw9Uiaw8fjR0STX73OBqgaz+j
- TLSH T1B30363387EE56972E37BEB7585F781C2A874B8127D15890E94CF67440833F62EC61A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_0ef305d90667f445219b0ec02da86e07_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_0ef305d90667f445219b0ec02da86e07_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_0ef305d90667f445219b0ec02da86e07_cryptolocker_elex
- Size 37KB
- SHA256 d66ec1d09184df89cd15f41ade11d265fe278047d181d701c131a914bbffa37b
- MD5 0ef305d90667f445219b0ec02da86e07
- SHA1 2a6388a42cf7372cc3158a11109119a4ea0c3aa6
- SHA512 3c31a2ad48516521375168bbafbe81ba0255c789cb7347eadacba2fa94f06fbc770e657b2b23471e4112c2ed58d847fe4634a5c8e62f2eb5bc174a8742348352
- SSDEEP 384:bdDl1ovmXAw9PMDREhi9OUSPlRxMc/cip58TfjDN0g/HNblX7QCOBqYvaz+j:bdDOw9Uiaw8fjR0STX73OBqgaz+j
- TLSH T1B30363387EE56972E37BEB7585F781C2A874B8127D15890E94CF67440833F62EC61A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE