General
- Target 2026-08-24_991d6690657f52f7d9674d63405dca53_cryptolocker_elex
- Size 32KB
- Sample260825-hmb9eaxfrd
- SHA256 ffb34f7e165df481b9df087162d69db4e889bb5cc795512bfd6f606f8703112e
- MD5 991d6690657f52f7d9674d63405dca53
- SHA1 7ccec0fa0481a0e0d4860107ba9b0f204bd771de
- SHA512 d12d53e5e8bdeaa1ad3514117aa371eba403b079aef4ead6d823c080b4fd400a09c6c65dcc9bb9cd7ee9b2f7015d312dc1fb56c3fd779bab660bafb9fb4bc835
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgI2wegz3GvUqmul3+Mao:bA74zYcgT/Ekd0ryfjPI2bgY+0
- TLSH T135E2D7386FD72D72D3779EB595F791C27836B8223A258C4E98CF23848D32B52AC4194D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-24_991d6690657f52f7d9674d63405dca53_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_991d6690657f52f7d9674d63405dca53_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_991d6690657f52f7d9674d63405dca53_cryptolocker_elex
- Size 32KB
- SHA256 ffb34f7e165df481b9df087162d69db4e889bb5cc795512bfd6f606f8703112e
- MD5 991d6690657f52f7d9674d63405dca53
- SHA1 7ccec0fa0481a0e0d4860107ba9b0f204bd771de
- SHA512 d12d53e5e8bdeaa1ad3514117aa371eba403b079aef4ead6d823c080b4fd400a09c6c65dcc9bb9cd7ee9b2f7015d312dc1fb56c3fd779bab660bafb9fb4bc835
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUgI2wegz3GvUqmul3+Mao:bA74zYcgT/Ekd0ryfjPI2bgY+0
- TLSH T135E2D7386FD72D72D3779EB595F791C27836B8223A258C4E98CF23848D32B52AC4194D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE