General
- Target 2026-07-05_1b6643f044b32c5e6b8fac0339183beb_cryptolocker_elex
- Size 4.6MB
- Sample260705-b9yycsb18r
- SHA256 1d0666f22d627a6cc357a535c6b265ad80a812f1e55c7bb8669eef0f980e0fbf
- MD5 1b6643f044b32c5e6b8fac0339183beb
- SHA1 75ac1e6a6c875a3726d341e3ff2b59a25b55baa3
- SHA512 d4e490e410ee000de3595c7a7b0b8a86d7c0f4750bf377da0f627e6aadd8aa7d721519984cd9892153eb6f8037be17a542d63e91e8b1cce5870c9ea951e53be5
- SSDEEP 98304:uR/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymT6:w/ZFIjBzF/ZFIjBzPEUus6
- TLSH T18D263C5BA8E650A4C8FAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-05_1b6643f044b32c5e6b8fac0339183beb_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_1b6643f044b32c5e6b8fac0339183beb_cryptolocker_elex.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_1b6643f044b32c5e6b8fac0339183beb_cryptolocker_elex
- Size 4.6MB
- SHA256 1d0666f22d627a6cc357a535c6b265ad80a812f1e55c7bb8669eef0f980e0fbf
- MD5 1b6643f044b32c5e6b8fac0339183beb
- SHA1 75ac1e6a6c875a3726d341e3ff2b59a25b55baa3
- SHA512 d4e490e410ee000de3595c7a7b0b8a86d7c0f4750bf377da0f627e6aadd8aa7d721519984cd9892153eb6f8037be17a542d63e91e8b1cce5870c9ea951e53be5
- SSDEEP 98304:uR/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymT6:w/ZFIjBzF/ZFIjBzPEUus6
- TLSH T18D263C5BA8E650A4C8FAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE