General
- Target 2026-07-05_41853875f04e7c69748aec3f4cfc212f_cryptolocker_elex
- Size 42KB
- Sample260705-vr6p2aet4y
- SHA256 1aa1981a3d76b126ef407f0152e7548548d67e1835c6354157205851d4318010
- MD5 41853875f04e7c69748aec3f4cfc212f
- SHA1 70f7dfc8bd0851d3a1fd933699e9e71d28d03c5c
- SHA512 b47c8692f481cbd88419152be6cc66fc916edb5837427cf28c6d753ee297ee792959a5c880635dc1d941ed313f233ec52c8a15e306102db804a2cc370c50f93f
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4Gy:lj+VGMOtEvwDpjoNMpBaGy
- TLSH T19113C7366FC51932D2779B7195FB82C2BA66BC563C31990E918A33054C33B02EDA1E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-05_41853875f04e7c69748aec3f4cfc212f_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-05_41853875f04e7c69748aec3f4cfc212f_cryptolocker_elex.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-05_41853875f04e7c69748aec3f4cfc212f_cryptolocker_elex
- Size 42KB
- SHA256 1aa1981a3d76b126ef407f0152e7548548d67e1835c6354157205851d4318010
- MD5 41853875f04e7c69748aec3f4cfc212f
- SHA1 70f7dfc8bd0851d3a1fd933699e9e71d28d03c5c
- SHA512 b47c8692f481cbd88419152be6cc66fc916edb5837427cf28c6d753ee297ee792959a5c880635dc1d941ed313f233ec52c8a15e306102db804a2cc370c50f93f
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4Gy:lj+VGMOtEvwDpjoNMpBaGy
- TLSH T19113C7366FC51932D2779B7195FB82C2BA66BC563C31990E918A33054C33B02EDA1E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE