General
- Target 2026-09-07_3627258dd9a88c6ffdba583df25e3bca_cryptolocker_elex
- Size 55KB
- Sample260909-eelw4a1wbx
- SHA256 a11bb5af8ab91b214bcc5ce105c01da206d963a1225a3107f03b6cf17f8a6c18
- MD5 3627258dd9a88c6ffdba583df25e3bca
- SHA1 db753bcfacd7b417c287dbe0d1ecbcad28d6ea02
- SHA512 1fcd6f15f42b63a181060991dbbda743560288617c7dca644590f0c08b8ea4e039bb6ef69711c9ca1092b755e70dc6b2c7e9fcf48524606103d1f6e48386b4b7
- SSDEEP 768:bA74zYcgT/Ekd0ryfjGPsED3VK2+ZtyOjgO4r9vFAg2rqw3:bA6YcA/X6GKYTjipvF29
- TLSH T1D7433B1573A3B8B6E06A0B3500BB90F0667BBC517EB4426F3C8A735DE9B1DA09C05B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-07_3627258dd9a88c6ffdba583df25e3bca_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-07_3627258dd9a88c6ffdba583df25e3bca_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-07_3627258dd9a88c6ffdba583df25e3bca_cryptolocker_elex
- Size 55KB
- SHA256 a11bb5af8ab91b214bcc5ce105c01da206d963a1225a3107f03b6cf17f8a6c18
- MD5 3627258dd9a88c6ffdba583df25e3bca
- SHA1 db753bcfacd7b417c287dbe0d1ecbcad28d6ea02
- SHA512 1fcd6f15f42b63a181060991dbbda743560288617c7dca644590f0c08b8ea4e039bb6ef69711c9ca1092b755e70dc6b2c7e9fcf48524606103d1f6e48386b4b7
- SSDEEP 768:bA74zYcgT/Ekd0ryfjGPsED3VK2+ZtyOjgO4r9vFAg2rqw3:bA6YcA/X6GKYTjipvF29
- TLSH T1D7433B1573A3B8B6E06A0B3500BB90F0667BBC517EB4426F3C8A735DE9B1DA09C05B57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE