General
- Target 2026-08-26_efa49389e1222336ab9bc69f2e8212c6_cryptolocker_elex
- Size 26KB
- Sample260827-d18sbaxvaz
- SHA256 3892cef7d8a8c145dfd60de7f3c4e8ca962fa9f34ec29fbae975b5c5a1d54edb
- MD5 efa49389e1222336ab9bc69f2e8212c6
- SHA1 536fc4327cfeb145ffc4f7286d14406b48a78042
- SHA512 4ae2e78b7c2b082396d33e0fcefd12b46d439f3ef699333b5ab3e0f70882d6114c70fc8cbed6e889fe13fc8ba40aedfe4e35b9458d3a6ee2daac6440fd3e57d9
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUh/GsyZi:bA74zYcgT/Ekd0ryfjU
- TLSH T1BAC23A3577677C91D0695EB425FBA011797FBC513B38498F6CCF73ACDA71291640208A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-26_efa49389e1222336ab9bc69f2e8212c6_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-26_efa49389e1222336ab9bc69f2e8212c6_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-26_efa49389e1222336ab9bc69f2e8212c6_cryptolocker_elex
- Size 26KB
- SHA256 3892cef7d8a8c145dfd60de7f3c4e8ca962fa9f34ec29fbae975b5c5a1d54edb
- MD5 efa49389e1222336ab9bc69f2e8212c6
- SHA1 536fc4327cfeb145ffc4f7286d14406b48a78042
- SHA512 4ae2e78b7c2b082396d33e0fcefd12b46d439f3ef699333b5ab3e0f70882d6114c70fc8cbed6e889fe13fc8ba40aedfe4e35b9458d3a6ee2daac6440fd3e57d9
- SSDEEP 384:bA74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUh/GsyZi:bA74zYcgT/Ekd0ryfjU
- TLSH T1BAC23A3577677C91D0695EB425FBA011797FBC513B38498F6CCF73ACDA71291640208A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE