General
- Target 2026-08-22_4ecd844d79e17f4e61cb34f6c789bc0e_cryptolocker_elex
- Size 40KB
- Sample260823-kkd2bsvdmh
- SHA256 002bd63358b35f2d84ffd80aad07615fe48c2db93ca4d81ecc879074194f0ca8
- MD5 4ecd844d79e17f4e61cb34f6c789bc0e
- SHA1 6fe9b0e7112ba0a9959f18541e6c25a22d31236f
- SHA512 8df046d17812771832b65711a958060224a2c23be012e4ab8f4310e3e61e4f3c222e879b010d870081430249401014079c7561f8de1dcbec52b831f8ab4d761d
- SSDEEP 384:bdDl1ovmXAw9PMDREhi9OUSPlRxMc/cip58TfjDN0g/HNblX7QCOBqYvazTvbqj:bdDOw9Uiaw8fjR0STX73OBqgazTDM
- TLSH T17B1342387EE52972E37BEB7585F391C6B974B4223D15980E84CE57440833F62ECA1A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-22_4ecd844d79e17f4e61cb34f6c789bc0e_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_4ecd844d79e17f4e61cb34f6c789bc0e_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_4ecd844d79e17f4e61cb34f6c789bc0e_cryptolocker_elex
- Size 40KB
- SHA256 002bd63358b35f2d84ffd80aad07615fe48c2db93ca4d81ecc879074194f0ca8
- MD5 4ecd844d79e17f4e61cb34f6c789bc0e
- SHA1 6fe9b0e7112ba0a9959f18541e6c25a22d31236f
- SHA512 8df046d17812771832b65711a958060224a2c23be012e4ab8f4310e3e61e4f3c222e879b010d870081430249401014079c7561f8de1dcbec52b831f8ab4d761d
- SSDEEP 384:bdDl1ovmXAw9PMDREhi9OUSPlRxMc/cip58TfjDN0g/HNblX7QCOBqYvazTvbqj:bdDOw9Uiaw8fjR0STX73OBqgazTDM
- TLSH T17B1342387EE52972E37BEB7585F391C6B974B4223D15980E84CE57440833F62ECA1A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE