General
- Target 2026-08-23_c789ec28c4806c7fac11cdb3d928e54d_cryptolocker_elex
- Size 37KB
- Sample260823-1hd7bavyhy
- SHA256 bc98366acea48ad640dbf90df31bb16705e68e139ce74a204b86fa56537f96de
- MD5 c789ec28c4806c7fac11cdb3d928e54d
- SHA1 06a91f8108a45aa2e7492765e070f195e4a1ee1b
- SHA512 cb7a2df63844b306483eb3b4b7de0a4d34c257439f3eed5104d62354a6f981ebf5be4b34335418f89350900c8b83b32787c4ad913c23e7a99cb4a0316d219cea
- SSDEEP 384:buWbtjL8L1iE0eBhkzPbKAaomTqCHMwfkfjDvghmaPc4mbZFVzmZPq:bxNQIE0eBhkL2Fo1Csw8fjzg1AqC
- TLSH T16003A538AED62972E37BCF7585F751C7B879786239118D8E54CE23480D23F52AC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-23_c789ec28c4806c7fac11cdb3d928e54d_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_c789ec28c4806c7fac11cdb3d928e54d_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_c789ec28c4806c7fac11cdb3d928e54d_cryptolocker_elex
- Size 37KB
- SHA256 bc98366acea48ad640dbf90df31bb16705e68e139ce74a204b86fa56537f96de
- MD5 c789ec28c4806c7fac11cdb3d928e54d
- SHA1 06a91f8108a45aa2e7492765e070f195e4a1ee1b
- SHA512 cb7a2df63844b306483eb3b4b7de0a4d34c257439f3eed5104d62354a6f981ebf5be4b34335418f89350900c8b83b32787c4ad913c23e7a99cb4a0316d219cea
- SSDEEP 384:buWbtjL8L1iE0eBhkzPbKAaomTqCHMwfkfjDvghmaPc4mbZFVzmZPq:bxNQIE0eBhkL2Fo1Csw8fjzg1AqC
- TLSH T16003A538AED62972E37BCF7585F751C7B879786239118D8E54CE23480D23F52AC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE