General
- Target 2026-07-11_12c0874d6aec739d0053de6e60e0b6a2_cryptolocker_elex
- Size 43KB
- Sample260711-jp5jead18k
- SHA256 cd235a6a6f30fe2ff07da48a5daf8d8b778939aaab201fd610cb722b7de0c96f
- MD5 12c0874d6aec739d0053de6e60e0b6a2
- SHA1 1f4019b3482d30dabad30aa69d204f7716bb67ae
- SHA512 c16ddf724d2f8f5ba05d54daa03c78f34a2e216b090103516821f93cfeaa089355a078f5c985e3ba0694b5695690785ba0cb5589ec6069ee4753bee4fb631ac8
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4GJ:lj+VGMOtEvwDpjoNMpBaGJ
- TLSH T10B13B6366FC51932D3779B7595FB82C2BA66BC563C31990E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-11_12c0874d6aec739d0053de6e60e0b6a2_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-11_12c0874d6aec739d0053de6e60e0b6a2_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-11_12c0874d6aec739d0053de6e60e0b6a2_cryptolocker_elex
- Size 43KB
- SHA256 cd235a6a6f30fe2ff07da48a5daf8d8b778939aaab201fd610cb722b7de0c96f
- MD5 12c0874d6aec739d0053de6e60e0b6a2
- SHA1 1f4019b3482d30dabad30aa69d204f7716bb67ae
- SHA512 c16ddf724d2f8f5ba05d54daa03c78f34a2e216b090103516821f93cfeaa089355a078f5c985e3ba0694b5695690785ba0cb5589ec6069ee4753bee4fb631ac8
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4GJ:lj+VGMOtEvwDpjoNMpBaGJ
- TLSH T10B13B6366FC51932D3779B7595FB82C2BA66BC563C31990E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE