General
- Target 2026-09-29_00e49da2966eb2b82231fe5882c41af5_cryptolocker_elex
- Size 42KB
- Sample260930-gysvvstblc
- SHA256 44e480dd2975cf2d50c2dd058b826ddcdc55aef09e6942f1c23ce3c9228dd186
- MD5 00e49da2966eb2b82231fe5882c41af5
- SHA1 20b1f286ce10a2cfc7f0b4774d6248ada5fa9413
- SHA512 c154d8fe1fe29ea0b32d1fdf6ac940aca30fe5bde0c104a893309773f0ff44d181de12b536f5c3eda6220dcdfc101781e4e1260325d667a3f4a8715c9b9fbfb2
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCPEYv4:bgGYcA/53GAGgIvFuEO4
- TLSH T1D61376387FE62972E37BDFB586F691C67935B8223D16880D40CA53844833F66DC61A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-29_00e49da2966eb2b82231fe5882c41af5_cryptolocker_elex.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-29_00e49da2966eb2b82231fe5882c41af5_cryptolocker_elex.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-29_00e49da2966eb2b82231fe5882c41af5_cryptolocker_elex
- Size 42KB
- SHA256 44e480dd2975cf2d50c2dd058b826ddcdc55aef09e6942f1c23ce3c9228dd186
- MD5 00e49da2966eb2b82231fe5882c41af5
- SHA1 20b1f286ce10a2cfc7f0b4774d6248ada5fa9413
- SHA512 c154d8fe1fe29ea0b32d1fdf6ac940aca30fe5bde0c104a893309773f0ff44d181de12b536f5c3eda6220dcdfc101781e4e1260325d667a3f4a8715c9b9fbfb2
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSpcXCPEYv4:bgGYcA/53GAGgIvFuEO4
- TLSH T1D61376387FE62972E37BDFB586F691C67935B8223D16880D40CA53844833F66DC61A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE