General
- Target 2026-08-21_d08293baa248c151725136a62a2fef6f_cryptolocker_elex
- Size 30KB
- Sample260821-ef5etsgj3v
- SHA256 9af4fce2ebca94db832aecc47a50a516ca46d914bfebefe1cb9c2187bd0682b6
- MD5 d08293baa248c151725136a62a2fef6f
- SHA1 bbdd943043f868795e9114b49d55f12ba66f15b7
- SHA512 df5d2c1e8bfb88f01e89b7b1c1d33b3bb38a6a45e8d34ae6c331dd5aae4044c72deeffb4d9c6966eec572ca841373e55713960b298260e13be94c77f38ab9103
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUuDz/mRRW8dC:bA74zYcgT/Ekd0ryfjLz/m28k
- TLSH T1D8E2FB387BD72D72D2779EB555F79082797ABC223A244C4E58CF33888932B52BC8254D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-21_d08293baa248c151725136a62a2fef6f_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_d08293baa248c151725136a62a2fef6f_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_d08293baa248c151725136a62a2fef6f_cryptolocker_elex
- Size 30KB
- SHA256 9af4fce2ebca94db832aecc47a50a516ca46d914bfebefe1cb9c2187bd0682b6
- MD5 d08293baa248c151725136a62a2fef6f
- SHA1 bbdd943043f868795e9114b49d55f12ba66f15b7
- SHA512 df5d2c1e8bfb88f01e89b7b1c1d33b3bb38a6a45e8d34ae6c331dd5aae4044c72deeffb4d9c6966eec572ca841373e55713960b298260e13be94c77f38ab9103
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUuDz/mRRW8dC:bA74zYcgT/Ekd0ryfjLz/m28k
- TLSH T1D8E2FB387BD72D72D2779EB555F79082797ABC223A244C4E58CF33888932B52BC8254D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE