General
- Target 2026-09-08_d532c5a818d736bbe426ec1d8c17e533_cryptolocker_elex
- Size 31KB
- Sample260908-ntd98sfb65
- SHA256 628d800b77feda16b0e7884bdef589bd5ac1bb43e89a786136eb0319f77b3772
- MD5 d532c5a818d736bbe426ec1d8c17e533
- SHA1 bc9252238a9f9667683bc3b471f6203e0607bd2d
- SHA512 5f432dbf0bdab028aa64c0cc3dfe95c6aebd1e1f82f3a99db3a168af4db07a16a3b4ec294ba9badc65892bc5a7af8d366e2155c9cb528443998f4b755f645bc1
- SSDEEP 384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/HNbz6avdr+mEk2HK6:bIDOw9UiaCHfjnE0S16avdr+mE9R
- TLSH T1D3E2C639BEE56873E277B7B584F781C2EC7479523A24494E98CF63880932E53BC5210D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-08_d532c5a818d736bbe426ec1d8c17e533_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_d532c5a818d736bbe426ec1d8c17e533_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_d532c5a818d736bbe426ec1d8c17e533_cryptolocker_elex
- Size 31KB
- SHA256 628d800b77feda16b0e7884bdef589bd5ac1bb43e89a786136eb0319f77b3772
- MD5 d532c5a818d736bbe426ec1d8c17e533
- SHA1 bc9252238a9f9667683bc3b471f6203e0607bd2d
- SHA512 5f432dbf0bdab028aa64c0cc3dfe95c6aebd1e1f82f3a99db3a168af4db07a16a3b4ec294ba9badc65892bc5a7af8d366e2155c9cb528443998f4b755f645bc1
- SSDEEP 384:bIDl1ovmXAw9PMDREhi9OUSPlRxMc/cip7IAfjDb4H0g/HNbz6avdr+mEk2HK6:bIDOw9UiaCHfjnE0S16avdr+mE9R
- TLSH T1D3E2C639BEE56873E277B7B584F781C2EC7479523A24494E98CF63880932E53BC5210D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE