General
- Target 2026-08-30_fb6f57519f01e0548c6632ba470264e4_cryptolocker_elex
- Size 58KB
- Sample260831-af9bkascrf
- SHA256 e8aebd2eb583fc52b59aafe73f04bc243d62c003816e9705fa7f3c0c0dce67a5
- MD5 fb6f57519f01e0548c6632ba470264e4
- SHA1 56c93fb8aa593a43abac7c26f5eccedca9ece2f0
- SHA512 28f8f5b15fb0b16915deac10a1efd0b429d232325595484fc54d4c27a5fe7add67af85001515a76477c00121b5d7ddc5a7da860c796d1f94baf0e2a6d93fdf3b
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpP+le3:b7/y28wZEjbnouy8G76iH/NLpt3
- TLSH T1DB438338BFE559B2D37BC57594F3A1C6B936B8123D029C0E55CB63880833F5AAD90A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-08-30_fb6f57519f01e0548c6632ba470264e4_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-30_fb6f57519f01e0548c6632ba470264e4_cryptolocker_elex
- Size 58KB
- SHA256 e8aebd2eb583fc52b59aafe73f04bc243d62c003816e9705fa7f3c0c0dce67a5
- MD5 fb6f57519f01e0548c6632ba470264e4
- SHA1 56c93fb8aa593a43abac7c26f5eccedca9ece2f0
- SHA512 28f8f5b15fb0b16915deac10a1efd0b429d232325595484fc54d4c27a5fe7add67af85001515a76477c00121b5d7ddc5a7da860c796d1f94baf0e2a6d93fdf3b
- SSDEEP 768:bco/2n1TCraU6GD1P2wZEjbhxnbcuyD7U9kXDn62tH/1/LpP+le3:b7/y28wZEjbnouy8G76iH/NLpt3
- TLSH T1DB438338BFE559B2D37BC57594F3A1C6B936B8123D029C0E55CB63880833F5AAD90A1D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detection of CryptoLocker Variants
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE