General
- Target 2026-08-21_8671729115c9af97329298ea422658a9_cryptolocker_elex
- Size 30KB
- Sample260822-ndmlnseh34
- SHA256 b993be13c1be6c53eecbbf7867c9c0b1f0c9e18eeb442cc488b5be8d8282e750
- MD5 8671729115c9af97329298ea422658a9
- SHA1 b9624a25238c42c13dc872deba888852d1851f91
- SHA512 9a0dc0846f47cd357a17466cff5a9ca4dc6abcffac027723b711f9ed620707c79185a22668e47b7dc3ff7361fd638d457b12bea9a0bf20ce4e03d5130042ec99
- SSDEEP 384:b674uGLLQRcsdeQ72ngEr4K7YmE8j60payjfjDnHMmHBda2D:b674zYcgT/Ekd0cqfjzsmHBdzD
- TLSH T183D2E9347BE72C71E37B9E7056F79082B97AB8223E25484E58CE73488D33792AC4154E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-21_8671729115c9af97329298ea422658a9_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_8671729115c9af97329298ea422658a9_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_8671729115c9af97329298ea422658a9_cryptolocker_elex
- Size 30KB
- SHA256 b993be13c1be6c53eecbbf7867c9c0b1f0c9e18eeb442cc488b5be8d8282e750
- MD5 8671729115c9af97329298ea422658a9
- SHA1 b9624a25238c42c13dc872deba888852d1851f91
- SHA512 9a0dc0846f47cd357a17466cff5a9ca4dc6abcffac027723b711f9ed620707c79185a22668e47b7dc3ff7361fd638d457b12bea9a0bf20ce4e03d5130042ec99
- SSDEEP 384:b674uGLLQRcsdeQ72ngEr4K7YmE8j60payjfjDnHMmHBda2D:b674zYcgT/Ekd0cqfjzsmHBdzD
- TLSH T183D2E9347BE72C71E37B9E7056F79082B97AB8223E25484E58CE73488D33792AC4154E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE