General
- Target 2026-08-21_eab1ca972d0ca245a8175f4943352284_cryptolocker_elex
- Size 26KB
- Sample260822-atbmfstyhy
- SHA256 f702a42887a660ba5077e0117a160ed0abc8b156c8596526638b2e0e8298030f
- MD5 eab1ca972d0ca245a8175f4943352284
- SHA1 61f940975a64b7589e80bb2fe0db852861ce84b4
- SHA512 56f37b3f11927bd4f56734b8e3633f6ee3f9ad8d38d144e0e10ef8c7f30060e8bc214f64f75387c5dc4175771a84c33c70da1ee48f920bee79ae1f59608ad8bc
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIOc8X:bA74zYcgT/Ekd0ryfjPIb6
- TLSH T17AC24A397BA73C61D07A9EB015FBA042797FBC513B38498FACCF3798DA716916402486
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-21_eab1ca972d0ca245a8175f4943352284_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_eab1ca972d0ca245a8175f4943352284_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_eab1ca972d0ca245a8175f4943352284_cryptolocker_elex
- Size 26KB
- SHA256 f702a42887a660ba5077e0117a160ed0abc8b156c8596526638b2e0e8298030f
- MD5 eab1ca972d0ca245a8175f4943352284
- SHA1 61f940975a64b7589e80bb2fe0db852861ce84b4
- SHA512 56f37b3f11927bd4f56734b8e3633f6ee3f9ad8d38d144e0e10ef8c7f30060e8bc214f64f75387c5dc4175771a84c33c70da1ee48f920bee79ae1f59608ad8bc
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgIOc8X:bA74zYcgT/Ekd0ryfjPIb6
- TLSH T17AC24A397BA73C61D07A9EB015FBA042797FBC513B38498FACCF3798DA716916402486
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE