General
- Target 2026-09-07_ef3c0576d25e69630fadcf6218f5f99e_cryptolocker_elex
- Size 41KB
- Sample260908-cc71fabl9v
- SHA256 19d8010def646be83d1d6c63ff6b8f44621f51b466c25a70e4ff655f6b378f72
- MD5 ef3c0576d25e69630fadcf6218f5f99e
- SHA1 a91e1def14b7482475366cd86452889c989c85ed
- SHA512 e13b819436771145ea2837d6b0f854b38a0c8c577ec18deb8ea929425e0db1f8c3be2e14be0b8401551df3fcfc1a49c497d5a3c5ac5e0b2bcfdb6fe2f340cf5f
- SSDEEP 768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAnA:bCDOw9aMDooc+vAA
- TLSH T1D3132F396BD4F772D277BA7184F241D2A8F475123B14C82D7ECE9347A822A3EAD5120D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-07_ef3c0576d25e69630fadcf6218f5f99e_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_ef3c0576d25e69630fadcf6218f5f99e_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_ef3c0576d25e69630fadcf6218f5f99e_cryptolocker_elex
- Size 41KB
- SHA256 19d8010def646be83d1d6c63ff6b8f44621f51b466c25a70e4ff655f6b378f72
- MD5 ef3c0576d25e69630fadcf6218f5f99e
- SHA1 a91e1def14b7482475366cd86452889c989c85ed
- SHA512 e13b819436771145ea2837d6b0f854b38a0c8c577ec18deb8ea929425e0db1f8c3be2e14be0b8401551df3fcfc1a49c497d5a3c5ac5e0b2bcfdb6fe2f340cf5f
- SSDEEP 768:bCDOw9UiaKHfjnD0S16avdrQFiLjJvtAnA:bCDOw9aMDooc+vAA
- TLSH T1D3132F396BD4F772D277BA7184F241D2A8F475123B14C82D7ECE9347A822A3EAD5120D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE