General
- Target 2026-08-24_8d76fc61ca8df1a3b05fe497bd6291e9_cryptolocker_elex
- Size 36KB
- Sample260825-jsfpfsfn5t
- SHA256 972ca4ab5897930dc9b00d9b972faa9014f715b92abc5520305c15e797ddccd7
- MD5 8d76fc61ca8df1a3b05fe497bd6291e9
- SHA1 f64e40f4ef0282200e1605489433bd30c9429b49
- SHA512 8d3aca39fefdb652d9c198956eaed312ccd8d6b8d8c0a5c267a913bd1f1d81dffb71dbcaa777b0cbdf2dc1918bf9a7d1814624cc852ad97db7cf7548e2a90eb3
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUuDzaNYqAy/YjyAFkt5ChXD:bA74zYcgT/Ekd0ryfjLzViYuAN
- TLSH T10CF295386BD62972D3BBDEB595F750C2B935B8233E158C0E54CB23884D32B26EC5261D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-24_8d76fc61ca8df1a3b05fe497bd6291e9_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_8d76fc61ca8df1a3b05fe497bd6291e9_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_8d76fc61ca8df1a3b05fe497bd6291e9_cryptolocker_elex
- Size 36KB
- SHA256 972ca4ab5897930dc9b00d9b972faa9014f715b92abc5520305c15e797ddccd7
- MD5 8d76fc61ca8df1a3b05fe497bd6291e9
- SHA1 f64e40f4ef0282200e1605489433bd30c9429b49
- SHA512 8d3aca39fefdb652d9c198956eaed312ccd8d6b8d8c0a5c267a913bd1f1d81dffb71dbcaa777b0cbdf2dc1918bf9a7d1814624cc852ad97db7cf7548e2a90eb3
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUuDzaNYqAy/YjyAFkt5ChXD:bA74zYcgT/Ekd0ryfjLzViYuAN
- TLSH T10CF295386BD62972D3BBDEB595F750C2B935B8233E158C0E54CB23884D32B26EC5261D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE