General
- Target 2026-06-27_37dea8a707f72c96486d22dd785d212c_cryptolocker_elex
- Size 43KB
- Sample260629-kc1kcsay7p
- SHA256 ae3d26e95b4b280bc036584029f979e7da0144bc456f655562e279aaa2406219
- MD5 37dea8a707f72c96486d22dd785d212c
- SHA1 43ab3de4f6ae31e8ec3d79983f7d94917f295907
- SHA512 040cd897269b595cf407fc1a2b16b564f078521fb0de39869215704c42fd0679e74309adf8e65e28579b16393c93806e5d4cfa2d4d28585c8d5d77dc8f894cf5
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4GO:lj+VGMOtEvwDpjoNMpBaGO
- TLSH T16C13B636AFC51532D2779B7595FB82C2BA76BC563C31990E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-06-27_37dea8a707f72c96486d22dd785d212c_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-27_37dea8a707f72c96486d22dd785d212c_cryptolocker_elex.exe
Resource
win11ltsc2024-20260617-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-27_37dea8a707f72c96486d22dd785d212c_cryptolocker_elex
- Size 43KB
- SHA256 ae3d26e95b4b280bc036584029f979e7da0144bc456f655562e279aaa2406219
- MD5 37dea8a707f72c96486d22dd785d212c
- SHA1 43ab3de4f6ae31e8ec3d79983f7d94917f295907
- SHA512 040cd897269b595cf407fc1a2b16b564f078521fb0de39869215704c42fd0679e74309adf8e65e28579b16393c93806e5d4cfa2d4d28585c8d5d77dc8f894cf5
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4GO:lj+VGMOtEvwDpjoNMpBaGO
- TLSH T16C13B636AFC51532D2779B7595FB82C2BA76BC563C31990E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE