General
- Target 2026-06-30_d1a937248d59fed7f1ca84f790d49022_cryptolocker_elex
- Size 43KB
- Sample260701-c54hqaex4y
- SHA256 1876874d9a45caac129e9ee8f2a6ffa8f2e1226ce37d55a41e37fce237c97045
- MD5 d1a937248d59fed7f1ca84f790d49022
- SHA1 f08e59c7adaf7bb44b9b2c38c9e7b7c8ca47852d
- SHA512 9bc9f12a6b9ae8a31beec1d4824d5c1f8603d70f3279fc7da3425c453b103d14c8a558b8dd825193e90fcbe05ae049752eb7c50bb95dddaf010a2b331527403b
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4d0v:lj+VGMOtEvwDpjoNMpBad0v
- TLSH T13813C636AFC51532E3779B7595FB82C2BA66BC563C31950E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-06-30_d1a937248d59fed7f1ca84f790d49022_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-30_d1a937248d59fed7f1ca84f790d49022_cryptolocker_elex.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-06-30_d1a937248d59fed7f1ca84f790d49022_cryptolocker_elex
- Size 43KB
- SHA256 1876874d9a45caac129e9ee8f2a6ffa8f2e1226ce37d55a41e37fce237c97045
- MD5 d1a937248d59fed7f1ca84f790d49022
- SHA1 f08e59c7adaf7bb44b9b2c38c9e7b7c8ca47852d
- SHA512 9bc9f12a6b9ae8a31beec1d4824d5c1f8603d70f3279fc7da3425c453b103d14c8a558b8dd825193e90fcbe05ae049752eb7c50bb95dddaf010a2b331527403b
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4d0v:lj+VGMOtEvwDpjoNMpBad0v
- TLSH T13813C636AFC51532E3779B7595FB82C2BA66BC563C31950E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE