General
- Target 2026-08-24_540841c05e16e769436726068d8e7c98_cryptolocker_elex
- Size 33KB
- Sample260825-qgs9qssfpc
- SHA256 8e2bdebc0861888783b102f4de9702406e7f8ad07b4cdb2e38cc7fcd781ea31f
- MD5 540841c05e16e769436726068d8e7c98
- SHA1 7ce0e98d93da0bb72683db2567524d72d3b85239
- SHA512 630a2528b456ef949e3531a4195998ecf7a0be7b0fd013a8557a4f64bc8ddbb19df95c9c6e9fdc4878178845694ae1e9db3b79ebc76c5f88cdd77119bb341e22
- SSDEEP 384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/Xfa4mitXcf0drrkC8l/:bIDOw9UiaCHfjnE0Sfa7i9U0P89
- TLSH T17AF2B7396EE56872D2B7AB7595F392C2EC74B8123E25484E94CF63850932F17FC6220D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-24_540841c05e16e769436726068d8e7c98_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_540841c05e16e769436726068d8e7c98_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_540841c05e16e769436726068d8e7c98_cryptolocker_elex
- Size 33KB
- SHA256 8e2bdebc0861888783b102f4de9702406e7f8ad07b4cdb2e38cc7fcd781ea31f
- MD5 540841c05e16e769436726068d8e7c98
- SHA1 7ce0e98d93da0bb72683db2567524d72d3b85239
- SHA512 630a2528b456ef949e3531a4195998ecf7a0be7b0fd013a8557a4f64bc8ddbb19df95c9c6e9fdc4878178845694ae1e9db3b79ebc76c5f88cdd77119bb341e22
- SSDEEP 384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/Xfa4mitXcf0drrkC8l/:bIDOw9UiaCHfjnE0Sfa7i9U0P89
- TLSH T17AF2B7396EE56872D2B7AB7595F392C2EC74B8123E25484E94CF63850932F17FC6220D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE