General
- Target 2026-05-06_4ba7979f406469ecbf698905d7805665_cryptolocker_elex
- Size 41KB
- Sample260506-mscvcabv2n
- SHA256 01276c3155f7c014b5b3425a6f65371865f03412b9c195e56cb5ac9572cf6946
- MD5 4ba7979f406469ecbf698905d7805665
- SHA1 8d60a8371e707381a62957edb7da9853ea41b180
- SHA512 476c5f517ed8c5db900be4d22e8f62688ede9637331d2cb283cf1a6aec4e14a63fe2e6b340479eb65b75e030b7cba28410770bcfb375579bdd620a1968bbe96c
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4d0Qt:lj+VGMOtEvwDpjoNMpBad0Qt
- TLSH T16813D6366FC50932D2779B7595FB82C2BA26BC563C31990E918A33054C33B42EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-05-06_4ba7979f406469ecbf698905d7805665_cryptolocker_elex.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-06_4ba7979f406469ecbf698905d7805665_cryptolocker_elex.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-06_4ba7979f406469ecbf698905d7805665_cryptolocker_elex
- Size 41KB
- SHA256 01276c3155f7c014b5b3425a6f65371865f03412b9c195e56cb5ac9572cf6946
- MD5 4ba7979f406469ecbf698905d7805665
- SHA1 8d60a8371e707381a62957edb7da9853ea41b180
- SHA512 476c5f517ed8c5db900be4d22e8f62688ede9637331d2cb283cf1a6aec4e14a63fe2e6b340479eb65b75e030b7cba28410770bcfb375579bdd620a1968bbe96c
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4d0Qt:lj+VGMOtEvwDpjoNMpBad0Qt
- TLSH T16813D6366FC50932D2779B7595FB82C2BA26BC563C31990E918A33054C33B42EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE