General
- Target 2026-09-06_3fe1d96927de32cf345d7b59835a3355_cryptolocker_elex
- Size 35KB
- Sample260907-e724sacn6t
- SHA256 e35437c2764aa2d1becbd60225f4d347660174e6bd40c23f56e361bd42b00eb0
- MD5 3fe1d96927de32cf345d7b59835a3355
- SHA1 498e59e7dd74eaa9501e784c7bd9352f4d7afd86
- SHA512 df6ac03c4b99b050a161e0e5ce60879782bf3fee4f72a947f25feaa05d5c26fab500409604b9281cad3863fec44a77943598d8c87749c64f5771215279ae5c49
- SSDEEP 384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXuaBflN3sj:bG74zYcgT/Ekd0ryfjWlN3sj
- TLSH T140F2F631F7EA3822DE36AEF491F640F1B73F7819791478DE08ABE34D88B2611995D009
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-06_3fe1d96927de32cf345d7b59835a3355_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_3fe1d96927de32cf345d7b59835a3355_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_3fe1d96927de32cf345d7b59835a3355_cryptolocker_elex
- Size 35KB
- SHA256 e35437c2764aa2d1becbd60225f4d347660174e6bd40c23f56e361bd42b00eb0
- MD5 3fe1d96927de32cf345d7b59835a3355
- SHA1 498e59e7dd74eaa9501e784c7bd9352f4d7afd86
- SHA512 df6ac03c4b99b050a161e0e5ce60879782bf3fee4f72a947f25feaa05d5c26fab500409604b9281cad3863fec44a77943598d8c87749c64f5771215279ae5c49
- SSDEEP 384:bG74uGLLQRcsdeQ72ngEr4K7YmE8j60nrlwfjDUGTGXuaBflN3sj:bG74zYcgT/Ekd0ryfjWlN3sj
- TLSH T140F2F631F7EA3822DE36AEF491F640F1B73F7819791478DE08ABE34D88B2611995D009
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE