General
- Target 2026-07-07_0a0512fe0d70c999ec858d4cc0671769_cryptolocker_elex
- Size 43KB
- Sample260707-3qd8dsf17v
- SHA256 47507810f7e8f9ebc065ec8b2a29dfe84518801f096011ae382deb15a2fe88e6
- MD5 0a0512fe0d70c999ec858d4cc0671769
- SHA1 f5b48ae56673a99724653ff020f694deea329f20
- SHA512 d39d6935718fd71edf279947633b0e618c99dfb772314698bb46f43f1f1bcb06c448e100ea3a1369e1a2791dc49fe2dacee5f9687ad0706ed855b4905ed9c4da
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4Gh:lj+VGMOtEvwDpjoNMpBaGh
- TLSH T1FB13B6366FC51532E3779B7195FB82C2BA66BC563D31990E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-07_0a0512fe0d70c999ec858d4cc0671769_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-07_0a0512fe0d70c999ec858d4cc0671769_cryptolocker_elex.exe
Resource
win11ltsc2024-20260706-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-07_0a0512fe0d70c999ec858d4cc0671769_cryptolocker_elex
- Size 43KB
- SHA256 47507810f7e8f9ebc065ec8b2a29dfe84518801f096011ae382deb15a2fe88e6
- MD5 0a0512fe0d70c999ec858d4cc0671769
- SHA1 f5b48ae56673a99724653ff020f694deea329f20
- SHA512 d39d6935718fd71edf279947633b0e618c99dfb772314698bb46f43f1f1bcb06c448e100ea3a1369e1a2791dc49fe2dacee5f9687ad0706ed855b4905ed9c4da
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4Gh:lj+VGMOtEvwDpjoNMpBaGh
- TLSH T1FB13B6366FC51532E3779B7195FB82C2BA66BC563D31990E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE