General
- Target 2026-05-27_af8abacf9901e1858af575ce20562c20_cryptolocker_elex
- Size 42KB
- Sample260527-e88myshw5w
- SHA256 aca652e38cacf6b859d354d17d104287a089a1071f2ac40d249ad89cb906dd8f
- MD5 af8abacf9901e1858af575ce20562c20
- SHA1 0f355f835d2171526c663597781b38a412162660
- SHA512 12eb421df1e63709afbff48e7a4128714019ae257bae376e78eb640bdccf1f50de822afa4fb8b4baa0c7903b7ccca868f8c228d119d30e3f4b2846624ff88f60
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4d0E:lj+VGMOtEvwDpjoNMpBad0E
- TLSH T15213C6366FC51932D2779B7595FB82C2BA26BC563C31990E918A33054C33B42EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-05-27_af8abacf9901e1858af575ce20562c20_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-05-27_af8abacf9901e1858af575ce20562c20_cryptolocker_elex.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-05-27_af8abacf9901e1858af575ce20562c20_cryptolocker_elex
- Size 42KB
- SHA256 aca652e38cacf6b859d354d17d104287a089a1071f2ac40d249ad89cb906dd8f
- MD5 af8abacf9901e1858af575ce20562c20
- SHA1 0f355f835d2171526c663597781b38a412162660
- SHA512 12eb421df1e63709afbff48e7a4128714019ae257bae376e78eb640bdccf1f50de822afa4fb8b4baa0c7903b7ccca868f8c228d119d30e3f4b2846624ff88f60
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4d0E:lj+VGMOtEvwDpjoNMpBad0E
- TLSH T15213C6366FC51932D2779B7595FB82C2BA26BC563C31990E918A33054C33B42EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE