General
- Target 2026-09-10_5f3d945b9f195bfd9e7e8e8a66a123cf_cryptolocker_elex
- Size 32KB
- Sample260910-ttgcgssdja
- SHA256 f87aaa678156b9b47e8d3a1e88938227c667177edfd7c57897fb2f2b21713ecc
- MD5 5f3d945b9f195bfd9e7e8e8a66a123cf
- SHA1 eb8dbcc2e2d8c634f0dec84884e27caf357bc8d9
- SHA512 f0fe480769b386ef07b4d0a95c8fd8592bdf6fb7f993500f5d2db5e3fd42711a95654a55f193bfa3970053a8b1c772b514d522e7d63168b30ff11091babd9eae
- SSDEEP 768:q0ZziOWwULueOSdE8tOOtEvwDpjeW01YJz3w:q0zizzOSxMOtEvwDpj/01Y93w
- TLSH T1C3E2C6799EC821B2E27796B6C9F69583B516BC6279215C0D15CF33424C33B43ACD2A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-09-10_5f3d945b9f195bfd9e7e8e8a66a123cf_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-10_5f3d945b9f195bfd9e7e8e8a66a123cf_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-10_5f3d945b9f195bfd9e7e8e8a66a123cf_cryptolocker_elex
- Size 32KB
- SHA256 f87aaa678156b9b47e8d3a1e88938227c667177edfd7c57897fb2f2b21713ecc
- MD5 5f3d945b9f195bfd9e7e8e8a66a123cf
- SHA1 eb8dbcc2e2d8c634f0dec84884e27caf357bc8d9
- SHA512 f0fe480769b386ef07b4d0a95c8fd8592bdf6fb7f993500f5d2db5e3fd42711a95654a55f193bfa3970053a8b1c772b514d522e7d63168b30ff11091babd9eae
- SSDEEP 768:q0ZziOWwULueOSdE8tOOtEvwDpjeW01YJz3w:q0zizzOSxMOtEvwDpj/01Y93w
- TLSH T1C3E2C6799EC821B2E27796B6C9F69583B516BC6279215C0D15CF33424C33B43ACD2A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE