General
- Target 2026-06-02_28b24f60442dc63255eb11e4c460296c_cryptolocker_elex
- Size 42KB
- Sample260602-jcd6paf15s
- SHA256 bfeeca0fd010ee18b735de405263ce98e9d6d4e943e6c01cf258e6bd17bdbfa5
- MD5 28b24f60442dc63255eb11e4c460296c
- SHA1 1105b956c8ece3a326b3a8cf06e9bbe6ba54f46e
- SHA512 2b1510744b435749c188ad86a88f668e694da825df0daed3e13ba360922e391027ccc60d8d9eac7570db1b939124d2b883cd38694a6dd5a50a39854a07cd7aa0
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4d0sH:lj+VGMOtEvwDpjoNMpBad06
- TLSH T1AC13C736AFC51532D2779B7595FB82C2BA26BC563C31990E918B33054C33B42EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-06-02_28b24f60442dc63255eb11e4c460296c_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-02_28b24f60442dc63255eb11e4c460296c_cryptolocker_elex.exe
Resource
win11-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-02_28b24f60442dc63255eb11e4c460296c_cryptolocker_elex
- Size 42KB
- SHA256 bfeeca0fd010ee18b735de405263ce98e9d6d4e943e6c01cf258e6bd17bdbfa5
- MD5 28b24f60442dc63255eb11e4c460296c
- SHA1 1105b956c8ece3a326b3a8cf06e9bbe6ba54f46e
- SHA512 2b1510744b435749c188ad86a88f668e694da825df0daed3e13ba360922e391027ccc60d8d9eac7570db1b939124d2b883cd38694a6dd5a50a39854a07cd7aa0
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4d0sH:lj+VGMOtEvwDpjoNMpBad06
- TLSH T1AC13C736AFC51532D2779B7595FB82C2BA26BC563C31990E918B33054C33B42EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE