General
- Target 2026-09-09_fb88693c7e0981049cde18bc16d50194_cryptolocker_elex
- Size 50KB
- Sample260909-kt4ncathma
- SHA256 1fceb522fc4ce447208ea2d0735ddd1eead39844dd2c97f70ccaa3be1340a252
- MD5 fb88693c7e0981049cde18bc16d50194
- SHA1 174da665cf1341a3418e102d43e7a11a2c4f8726
- SHA512 416ac917b8445afc5df66a6d3cd4b0894fee88225181d6a6349c145b7c6aa3657e762c22db153321c37b42966c6c27887376ac3fe9b3d6a275c51b76fca1f28c
- SSDEEP 768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9S9:bIDOw9a0DwitDZz19
- TLSH T19033C93C6EE45872D3BBDAB695F251C6B974B4223E059C0E44CB43850823F27FDA261E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-09_fb88693c7e0981049cde18bc16d50194_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-09_fb88693c7e0981049cde18bc16d50194_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-09_fb88693c7e0981049cde18bc16d50194_cryptolocker_elex
- Size 50KB
- SHA256 1fceb522fc4ce447208ea2d0735ddd1eead39844dd2c97f70ccaa3be1340a252
- MD5 fb88693c7e0981049cde18bc16d50194
- SHA1 174da665cf1341a3418e102d43e7a11a2c4f8726
- SHA512 416ac917b8445afc5df66a6d3cd4b0894fee88225181d6a6349c145b7c6aa3657e762c22db153321c37b42966c6c27887376ac3fe9b3d6a275c51b76fca1f28c
- SSDEEP 768:bIDOw9UiaCHfjnE0Sfa7ilR0p9u6p4ICNBCXK9S9:bIDOw9a0DwitDZz19
- TLSH T19033C93C6EE45872D3BBDAB695F251C6B974B4223E059C0E44CB43850823F27FDA261E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE