General
- Target 2026-09-08_33954e4dce04a36dcd7f4c0ae5b6daea_cryptolocker_elex
- Size 85KB
- Sample260910-hb7aeafh77
- SHA256 1b94a1f08b4789b18a4f1f9b85d40858563c93dd9346f71164a2aa22ea5cb47e
- MD5 33954e4dce04a36dcd7f4c0ae5b6daea
- SHA1 5bd9dbd346db933928e070c466bb8b2fb38ac9df
- SHA512 142c5f821f8a9493f273b957a95df046d3f98a66608a0e14f8ed3d43bef13c8a047dd8d9103d72bb419e334b9d3f523d581778668b5ed3604fb40c6c35af4b75
- SSDEEP 768:dUz7yVEhs9+OyqZQtOOtEvwDpjm9+4U9HueDgaRWDCSMzTs9AIIyw9o:dP+OyWQMOtEvwDpjwH8u8rZVTs9AW
- TLSH T1B68397278EC42265F633C7764AFEB2B165107C927910F5DC399AFE7C5533A23A850A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-08_33954e4dce04a36dcd7f4c0ae5b6daea_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-08_33954e4dce04a36dcd7f4c0ae5b6daea_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-08_33954e4dce04a36dcd7f4c0ae5b6daea_cryptolocker_elex
- Size 85KB
- SHA256 1b94a1f08b4789b18a4f1f9b85d40858563c93dd9346f71164a2aa22ea5cb47e
- MD5 33954e4dce04a36dcd7f4c0ae5b6daea
- SHA1 5bd9dbd346db933928e070c466bb8b2fb38ac9df
- SHA512 142c5f821f8a9493f273b957a95df046d3f98a66608a0e14f8ed3d43bef13c8a047dd8d9103d72bb419e334b9d3f523d581778668b5ed3604fb40c6c35af4b75
- SSDEEP 768:dUz7yVEhs9+OyqZQtOOtEvwDpjm9+4U9HueDgaRWDCSMzTs9AIIyw9o:dP+OyWQMOtEvwDpjwH8u8rZVTs9AW
- TLSH T1B68397278EC42265F633C7764AFEB2B165107C927910F5DC399AFE7C5533A23A850A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE