General
- Target 2026-08-20_5c25a094cee902742a9701038a0f0a56_cryptolocker_elex
- Size 44KB
- Sample260821-dhhhea1gnc
- SHA256 ee4bc8cbb9475bdb475e16229249d953a662255897a2ac6d74bffb8f93f36dfc
- MD5 5c25a094cee902742a9701038a0f0a56
- SHA1 441f71c7ce6e6bbbffa2afc8ea5efbec54d70117
- SHA512 b040d9b417f43f613823080197337b993999a25930b9aeea3b025174a5976487f95264d9479bbbec2730001fd27d99d457530b54f3a17d77fded6bc8ac564894
- SSDEEP 768:bmNQIE0eBhkL2Fo1CCwgfjOgXAeWwQEhFGXR:bmNrC7kYo1FxfwelE
- TLSH T186231F38AED52972D3BBDE7985F751C6B878B8623E018D4E50CB57440C23F22EDA161E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-20_5c25a094cee902742a9701038a0f0a56_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_5c25a094cee902742a9701038a0f0a56_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_5c25a094cee902742a9701038a0f0a56_cryptolocker_elex
- Size 44KB
- SHA256 ee4bc8cbb9475bdb475e16229249d953a662255897a2ac6d74bffb8f93f36dfc
- MD5 5c25a094cee902742a9701038a0f0a56
- SHA1 441f71c7ce6e6bbbffa2afc8ea5efbec54d70117
- SHA512 b040d9b417f43f613823080197337b993999a25930b9aeea3b025174a5976487f95264d9479bbbec2730001fd27d99d457530b54f3a17d77fded6bc8ac564894
- SSDEEP 768:bmNQIE0eBhkL2Fo1CCwgfjOgXAeWwQEhFGXR:bmNrC7kYo1FxfwelE
- TLSH T186231F38AED52972D3BBDE7985F751C6B878B8623E018D4E50CB57440C23F22EDA161E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE