General
- Target 2026-09-30_db781dcd7494bdf33d194014fac807a7_cryptolocker_elex
- Size 37KB
- Sample260930-h7ha6avvbw
- SHA256 2806f95ec2765c04e8c7e0f86b8bd048cb9132622cfc475bcf9e9fbb15f31f55
- MD5 db781dcd7494bdf33d194014fac807a7
- SHA1 f43c8ab9c94607808d8083790b4d834e2df481da
- SHA512 afa646fb958c07052d96a57ae05e7232259d4eb6325a7c666a52bdcdb8e31762ec13fb4d1d4c88b1fc0020a2969ac24717f86dddcbef980a3f4a4ee12b12026c
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSp91Gp:bgGYcA/53GAGgIvFiGp
- TLSH T1A103A5387FD62972D37BDE7585F791C6B93AB8223D16880D54CA53848C33B52EC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-09-30_db781dcd7494bdf33d194014fac807a7_cryptolocker_elex.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-30_db781dcd7494bdf33d194014fac807a7_cryptolocker_elex.exe
Resource
win11ltsc2024-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-30_db781dcd7494bdf33d194014fac807a7_cryptolocker_elex
- Size 37KB
- SHA256 2806f95ec2765c04e8c7e0f86b8bd048cb9132622cfc475bcf9e9fbb15f31f55
- MD5 db781dcd7494bdf33d194014fac807a7
- SHA1 f43c8ab9c94607808d8083790b4d834e2df481da
- SHA512 afa646fb958c07052d96a57ae05e7232259d4eb6325a7c666a52bdcdb8e31762ec13fb4d1d4c88b1fc0020a2969ac24717f86dddcbef980a3f4a4ee12b12026c
- SSDEEP 768:bgX4zYcgTEu6QOaryfjqDGgIvq3ncSp91Gp:bgGYcA/53GAGgIvFiGp
- TLSH T1A103A5387FD62972D37BDE7585F791C6B93AB8223D16880D54CA53848C33B52EC91A0E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE