General
- Target 2026-08-27_b7090768eccc84780197bb8a336e370a_cryptolocker_elex
- Size 51KB
- Sample260827-lz2llssfma
- SHA256 d2afee2e1256e335c64a13bd45d7e309a295c46303b7681b4d09a95a5189f8fb
- MD5 b7090768eccc84780197bb8a336e370a
- SHA1 8f9cb6a41a8c7a484c9d3506b13a0a44373429dd
- SHA512 d19564f7ea3c815bf69cf929e1eab46a35b643e623b6d81efd4173c34a043f59b13f15314f8c2d649e3f71b5ce4fd174ad82424f74dcabb7fba6071107671e3d
- SSDEEP 768:qao/2n1TCraU6GD1a4Xcn62y7Q/bqK76VIp:qF/y2lm6o2KOup
- TLSH T12833ED3C6EE95972D3BBDA7585F2A1C6B93678123D02980E50CB53840C33F57BDA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-27_b7090768eccc84780197bb8a336e370a_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-27_b7090768eccc84780197bb8a336e370a_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-27_b7090768eccc84780197bb8a336e370a_cryptolocker_elex
- Size 51KB
- SHA256 d2afee2e1256e335c64a13bd45d7e309a295c46303b7681b4d09a95a5189f8fb
- MD5 b7090768eccc84780197bb8a336e370a
- SHA1 8f9cb6a41a8c7a484c9d3506b13a0a44373429dd
- SHA512 d19564f7ea3c815bf69cf929e1eab46a35b643e623b6d81efd4173c34a043f59b13f15314f8c2d649e3f71b5ce4fd174ad82424f74dcabb7fba6071107671e3d
- SSDEEP 768:qao/2n1TCraU6GD1a4Xcn62y7Q/bqK76VIp:qF/y2lm6o2KOup
- TLSH T12833ED3C6EE95972D3BBDA7585F2A1C6B93678123D02980E50CB53840C33F57BDA1A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE