General
- Target 2026-08-22_ba957f6fcc691b4e45c113c5cac35bed_cryptolocker_elex
- Size 37KB
- Sample260823-b17h5sha39
- SHA256 1fa1fcf6f07faf3859c519e776323dfac97dc063b716609185691981738bee9d
- MD5 ba957f6fcc691b4e45c113c5cac35bed
- SHA1 f3f92fe60efe07217308d1d33dc93ae8f4263b5e
- SHA512 b1a0e630a12645e3b2d1456af6b9a0e6f98636eeb45410643a587426ed027a59456b461751b69777727ae98d5f88cfc0407699f3fb78a807f1493c482bd71dc4
- SSDEEP 768:Z6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5axcW:Z6QFElP6n+gMQMOtEvwDpjyaYaGW
- TLSH T1690394366FC51AB2D773DAB185FB86C3B923BC2675328A0D50CE37054D33602A9A1D1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-22_ba957f6fcc691b4e45c113c5cac35bed_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_ba957f6fcc691b4e45c113c5cac35bed_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_ba957f6fcc691b4e45c113c5cac35bed_cryptolocker_elex
- Size 37KB
- SHA256 1fa1fcf6f07faf3859c519e776323dfac97dc063b716609185691981738bee9d
- MD5 ba957f6fcc691b4e45c113c5cac35bed
- SHA1 f3f92fe60efe07217308d1d33dc93ae8f4263b5e
- SHA512 b1a0e630a12645e3b2d1456af6b9a0e6f98636eeb45410643a587426ed027a59456b461751b69777727ae98d5f88cfc0407699f3fb78a807f1493c482bd71dc4
- SSDEEP 768:Z6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpj/MLam5axcW:Z6QFElP6n+gMQMOtEvwDpjyaYaGW
- TLSH T1690394366FC51AB2D773DAB185FB86C3B923BC2675328A0D50CE37054D33602A9A1D1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE