General
- Target 2026-09-12_2283a6aa9179cabfbb15c2381f5d19a1_cryptolocker_elex
- Size 1.0MB
- Sample260913-frw39sfc94
- SHA256 e72c593615ed0047983c494e2ff2998d252d9a82bb1b14b2c53cb69e221c1d27
- MD5 2283a6aa9179cabfbb15c2381f5d19a1
- SHA1 2ef3b3593919f005b9f64780d514618f4886f7a4
- SHA512 ceddb71a296e36883d464654aeb4a8a68e935b1835c8064fb0c3bc4d469b0951586da4f9ba12b5f737e83ac196331eeac0d37c757d06b9eacc528169e0657383
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPqI:bGbvflT/ZFIjBzhxwOgXKarY1iBh
- TLSH T14C2509BE74972645FE625C307FECF660DB57287ACB6BDAF24195A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-12_2283a6aa9179cabfbb15c2381f5d19a1_cryptolocker_elex.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-12_2283a6aa9179cabfbb15c2381f5d19a1_cryptolocker_elex.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-12_2283a6aa9179cabfbb15c2381f5d19a1_cryptolocker_elex
- Size 1.0MB
- SHA256 e72c593615ed0047983c494e2ff2998d252d9a82bb1b14b2c53cb69e221c1d27
- MD5 2283a6aa9179cabfbb15c2381f5d19a1
- SHA1 2ef3b3593919f005b9f64780d514618f4886f7a4
- SHA512 ceddb71a296e36883d464654aeb4a8a68e935b1835c8064fb0c3bc4d469b0951586da4f9ba12b5f737e83ac196331eeac0d37c757d06b9eacc528169e0657383
- SSDEEP 12288:bGbEnOflT/ZFIjBz3xjTxynGUOUhXfSAkVH/CrYQIUMkDmndJmzS+OAPqI:bGbvflT/ZFIjBzhxwOgXKarY1iBh
- TLSH T14C2509BE74972645FE625C307FECF660DB57287ACB6BDAF24195A0301A210D2FC62817
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE