2026-05-05_b069ae17611fba2b96b9a5accf43e85d_cryptolocker_elex

Sharing

Copy URL Twitter E-mail

General

Target
2026-05-05_b069ae17611fba2b96b9a5accf43e85d_cryptolocker_elex
Size 97KB
Sample260505-n992vae13s
SHA256 1aabfdb7de5fceca09f4a92ae86f35d15d8989f836e287d20d890967c68f141f
MD5 b069ae17611fba2b96b9a5accf43e85d
SHA1 971cba270931f7e67bd379d2d09cfe22eb2d58de
SHA512 4f674c23da4a8e11973e211fafc55fbbd9514c80de9015446db6115176ef8d9df3cdaefb9e6f8699bb847872fb0b03cd7ddc08a1ef1edc812d4e14fc5d13f195
SSDEEP 3072:XqntdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszNHIUZspjgCDQqk:XqntdgI2MyzNORQtOfl1qNVo7R+S+gNz
TLSH
T132A3843AAEC516F2D37386B3E5F745C3FA26B4323512890D409A5B0509B3F56ADB2D0E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Detection of Cryptolocker Samples 1 IoCs

resource	yara_rule
sample	CryptoLocker_set1

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-05-05_b069ae17611fba2b96b9a5accf43e85d_cryptolocker_elex

File Explorer

2026-05-05_b069ae17611fba2b96b9a5accf43e85d_cryptolocker_elex

.exe 97KB

2026-05-05_b069ae17611fba2b96b9a5accf43e85d_cryptolocker_elex

SHA256 1aabfdb7de5fceca09f4a92ae86f35d15d8989f836e287d20d890967c68f141f
MD5 b069ae17611fba2b96b9a5accf43e85d
SHA1 971cba270931f7e67bd379d2d09cfe22eb2d58de
SHA512 4f674c23da4a8e11973e211fafc55fbbd9514c80de9015446db6115176ef8d9df3cdaefb9e6f8699bb847872fb0b03cd7ddc08a1ef1edc812d4e14fc5d13f195
SSDEEP 3072:XqntdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZszNHIUZspjgCDQqk:XqntdgI2MyzNORQtOfl1qNVo7R+S+gNz
TLSH
T132A3843AAEC516F2D37386B3E5F745C3FA26B4323512890D409A5B0509B3F56ADB2D0E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Detection of CryptoLocker Variants
Detection of Cryptolocker Samples
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.text

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-05-05_b069ae17611fba2b96b9a5accf43e85d_cryptolocker_elex

generic