General
- Target 2026-08-23_37d6e5ba96a5c061611f5cfb612c84b3_cryptolocker_elex
- Size 30KB
- Sample260824-rcmrtsyfmc
- SHA256 2ef024c545215a8854394693c835933b2f30f1a3ad23ac3e33c6f6b0e975af14
- MD5 37d6e5ba96a5c061611f5cfb612c84b3
- SHA1 450b4366e61f0882f8609ffbbe0865b23f064dde
- SHA512 6c6081da8524075e6d19144cdb5228b3aa210c78171dd178272c3cf5c2b79aa355841ee3c3ae7237e6dc08c4e2cac23fdc2cd3c2c2378954cd1096c95335f5f7
- SSDEEP 384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/HKr42T3lJ/1cwvU:bIDOw9UiaCHfjnE0SKrzBhO
- TLSH T1B3D2D939BEE96872E277BB7554F792C6A874BD113E24494E98CF73890931E12FC2120D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-23_37d6e5ba96a5c061611f5cfb612c84b3_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_37d6e5ba96a5c061611f5cfb612c84b3_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_37d6e5ba96a5c061611f5cfb612c84b3_cryptolocker_elex
- Size 30KB
- SHA256 2ef024c545215a8854394693c835933b2f30f1a3ad23ac3e33c6f6b0e975af14
- MD5 37d6e5ba96a5c061611f5cfb612c84b3
- SHA1 450b4366e61f0882f8609ffbbe0865b23f064dde
- SHA512 6c6081da8524075e6d19144cdb5228b3aa210c78171dd178272c3cf5c2b79aa355841ee3c3ae7237e6dc08c4e2cac23fdc2cd3c2c2378954cd1096c95335f5f7
- SSDEEP 384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/HKr42T3lJ/1cwvU:bIDOw9UiaCHfjnE0SKrzBhO
- TLSH T1B3D2D939BEE96872E277BB7554F792C6A874BD113E24494E98CF73890931E12FC2120D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE