General
- Target 2026-08-24_ab561cff7772c020e4b1afd50c4babc4_cryptolocker_elex
- Size 35KB
- Sample260825-fbakbsel7v
- SHA256 22ce18c104eca99925be8d98939a1969f3b552795827b71905464214fb1b1774
- MD5 ab561cff7772c020e4b1afd50c4babc4
- SHA1 1148d711f2cc25ba597bc44383f52816bedcdd4f
- SHA512 605558c0bc49809dfcf4a3c7775f2f2c28184b4544adcbc5ddda01f64dbc9c16a50b40bfabeb15c8e908886dc0ec3ea99c162a78d9b352d6223f9b46d6c4dbab
- SSDEEP 384:buWbtjL8L1iE0eBhkzPbKAaomTqCHMwfkfjDvghmaPc4mbZFVzmZc:bxNQIE0eBhkL2Fo1Csw8fjzg1Aqc
- TLSH T1ACF2B438BDD62C72E37B8F7589F751C7B879B8A239158D8E54CE27480D23B12AC9150E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-24_ab561cff7772c020e4b1afd50c4babc4_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_ab561cff7772c020e4b1afd50c4babc4_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_ab561cff7772c020e4b1afd50c4babc4_cryptolocker_elex
- Size 35KB
- SHA256 22ce18c104eca99925be8d98939a1969f3b552795827b71905464214fb1b1774
- MD5 ab561cff7772c020e4b1afd50c4babc4
- SHA1 1148d711f2cc25ba597bc44383f52816bedcdd4f
- SHA512 605558c0bc49809dfcf4a3c7775f2f2c28184b4544adcbc5ddda01f64dbc9c16a50b40bfabeb15c8e908886dc0ec3ea99c162a78d9b352d6223f9b46d6c4dbab
- SSDEEP 384:buWbtjL8L1iE0eBhkzPbKAaomTqCHMwfkfjDvghmaPc4mbZFVzmZc:bxNQIE0eBhkL2Fo1Csw8fjzg1Aqc
- TLSH T1ACF2B438BDD62C72E37B8F7589F751C7B879B8A239158D8E54CE27480D23B12AC9150E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE