General
- Target 2026-08-21_5dd1ba37c471cb25381493539e71ec81_cryptolocker_elex
- Size 29KB
- Sample260822-rraqtavgla
- SHA256 d7b8e7ae18a59898d5ae8b6b4b85070877d22875b469bb5c35a1b4fe20455fe5
- MD5 5dd1ba37c471cb25381493539e71ec81
- SHA1 c3a847ce17dfa99c767a63d53ae094e3af98c6dc
- SHA512 33c82ed989734fa90901f9f1867a378821a43f6a4b49ed0c89e91426ae22efb2168fa68e046709ae6ef4b7cc6c69c7d71beb714042739d8eb009327746393876
- SSDEEP 384:b674uGLLQRcsdeQ72ngEr4K7YmE8j60payjfjDnHMmHBdaK/:b674zYcgT/Ekd0cqfjzsmHBdZ/
- TLSH T11FD2FA347BE72C71E37B9E7056F79082B97ABC223E25484E58CE73488D73752A84254A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-21_5dd1ba37c471cb25381493539e71ec81_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_5dd1ba37c471cb25381493539e71ec81_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_5dd1ba37c471cb25381493539e71ec81_cryptolocker_elex
- Size 29KB
- SHA256 d7b8e7ae18a59898d5ae8b6b4b85070877d22875b469bb5c35a1b4fe20455fe5
- MD5 5dd1ba37c471cb25381493539e71ec81
- SHA1 c3a847ce17dfa99c767a63d53ae094e3af98c6dc
- SHA512 33c82ed989734fa90901f9f1867a378821a43f6a4b49ed0c89e91426ae22efb2168fa68e046709ae6ef4b7cc6c69c7d71beb714042739d8eb009327746393876
- SSDEEP 384:b674uGLLQRcsdeQ72ngEr4K7YmE8j60payjfjDnHMmHBdaK/:b674zYcgT/Ekd0cqfjzsmHBdZ/
- TLSH T11FD2FA347BE72C71E37B9E7056F79082B97ABC223E25484E58CE73488D73752A84254A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE