General
- Target 2026-08-24_40019c655d3255f7493a1ec868c52765_cryptolocker_elex
- Size 51KB
- Sample260825-r6rymsteqb
- SHA256 b9f786cf2015d67940c99e81a56ba8ab14a4c8d0115fc513e9f1e68b009a873b
- MD5 40019c655d3255f7493a1ec868c52765
- SHA1 b729c4b775385c73d34923e29aa13c1c571a679e
- SHA512 01da4f66b46e609cb3f66814b8cb779c2979457bcc3a8169aec68602d45e5871633a38e7cc3307b0a05aeef269b1fa079332a7709d921fccbc5254df19aa753f
- SSDEEP 768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMV0W3SaBK+xT0IOO3f:bc/y2lkF0+BUpCFIOwf
- TLSH T1CC33763C7FD51A72D37786B585F7A1C2FA39B82239069C0D50CBA3480533F5AADA1A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-24_40019c655d3255f7493a1ec868c52765_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-24_40019c655d3255f7493a1ec868c52765_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-24_40019c655d3255f7493a1ec868c52765_cryptolocker_elex
- Size 51KB
- SHA256 b9f786cf2015d67940c99e81a56ba8ab14a4c8d0115fc513e9f1e68b009a873b
- MD5 40019c655d3255f7493a1ec868c52765
- SHA1 b729c4b775385c73d34923e29aa13c1c571a679e
- SHA512 01da4f66b46e609cb3f66814b8cb779c2979457bcc3a8169aec68602d45e5871633a38e7cc3307b0a05aeef269b1fa079332a7709d921fccbc5254df19aa753f
- SSDEEP 768:b7o/2n1TCraU6GD1a4X0WcO+wMVm+slAMV0W3SaBK+xT0IOO3f:bc/y2lkF0+BUpCFIOwf
- TLSH T1CC33763C7FD51A72D37786B585F7A1C2FA39B82239069C0D50CBA3480533F5AADA1A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE