General
- Target 2026-04-15_cef7c5b6b818a2eebb7d2d979d72305d_cryptolocker_elex
- Size 40KB
- Sample260415-sdsvxac14s
- SHA256 87137d99ddb7d5602703b5781565454bfd562e5a26b1a7d6ded39c2f775a03fa
- MD5 cef7c5b6b818a2eebb7d2d979d72305d
- SHA1 40d8da7636678ecd07081a972d1b751681867ad0
- SHA512 3c2a4375c52bb85349ecb6a67d5451584c7382782a442fe8731541cd178c38860772d84c1d8f4154da74985f3e1dd5d4ed9c164a5ad15cd19289d424d759b8c2
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBV/:lj+VGMOtEvwDpjoNMpBV/
- TLSH T17B03E736AFC50932D2779B7195FB8682B626BC563C31990E918B33054D33B02EDA1D2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-04-15_cef7c5b6b818a2eebb7d2d979d72305d_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-15_cef7c5b6b818a2eebb7d2d979d72305d_cryptolocker_elex.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-15_cef7c5b6b818a2eebb7d2d979d72305d_cryptolocker_elex
- Size 40KB
- SHA256 87137d99ddb7d5602703b5781565454bfd562e5a26b1a7d6ded39c2f775a03fa
- MD5 cef7c5b6b818a2eebb7d2d979d72305d
- SHA1 40d8da7636678ecd07081a972d1b751681867ad0
- SHA512 3c2a4375c52bb85349ecb6a67d5451584c7382782a442fe8731541cd178c38860772d84c1d8f4154da74985f3e1dd5d4ed9c164a5ad15cd19289d424d759b8c2
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBV/:lj+VGMOtEvwDpjoNMpBV/
- TLSH T17B03E736AFC50932D2779B7195FB8682B626BC563C31990E918B33054D33B02EDA1D2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE