General
- Target 2026-08-23_3cf64c36a225c28c9a223da4e6c8b982_cryptolocker_elex
- Size 53KB
- Sample260824-qt62csgr9t
- SHA256 0b8462878fe9ae87de5a14ff01985d1ba0bcc87637d1b424da152fdb2422e7e9
- MD5 3cf64c36a225c28c9a223da4e6c8b982
- SHA1 883ca1f50df6cc5af1478bcea95908b74c2469f8
- SHA512 e8c0ebb11fb7fde74e28905a5cea5dc3f8b6c957e0eaa5fc743d7e1eb937ae42204933dbd4f4814f0de2e5833c0149739bceec9a6e2c8d84608e67db83893b1f
- SSDEEP 1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatSz:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7C
- TLSH T16233DC396ED515F2D377DAB7E5F695C2F922B8223912880D40CB2F4409B3B52BDA1D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-23_3cf64c36a225c28c9a223da4e6c8b982_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_3cf64c36a225c28c9a223da4e6c8b982_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_3cf64c36a225c28c9a223da4e6c8b982_cryptolocker_elex
- Size 53KB
- SHA256 0b8462878fe9ae87de5a14ff01985d1ba0bcc87637d1b424da152fdb2422e7e9
- MD5 3cf64c36a225c28c9a223da4e6c8b982
- SHA1 883ca1f50df6cc5af1478bcea95908b74c2469f8
- SHA512 e8c0ebb11fb7fde74e28905a5cea5dc3f8b6c957e0eaa5fc743d7e1eb937ae42204933dbd4f4814f0de2e5833c0149739bceec9a6e2c8d84608e67db83893b1f
- SSDEEP 1536:o1KhxqwtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszsbKY1x5hjatSz:aq7tdgI2MyzNORQtOflIwoHNV2XBFV7C
- TLSH T16233DC396ED515F2D377DAB7E5F695C2F922B8223912880D40CB2F4409B3B52BDA1D0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE