General
- Target 2026-07-12_e3be6ddecd1e49ba99e52abc81f0d3c5_cryptolocker_elex
- Size 43KB
- Sample260712-j4fhtsew2k
- SHA256 ba5fa7f6c6844f93edef0e8d5f81ca59c940dd07f068570612487fddaa3bde00
- MD5 e3be6ddecd1e49ba99e52abc81f0d3c5
- SHA1 51a050de6f73f138799bdee580d2856179fdb2aa
- SHA512 8c19a31fda5955cf4b35a001a1153376464ba46a97787d4a69d48112dc8b10051dc94e0160671170ca8efb8b17655df9f52a920a7c4b10b6d1a0e940f42e4f67
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4Gg:lj+VGMOtEvwDpjoNMpBaGg
- TLSH T1D813A6366FC51932E3779B7595F782C2BA66BC563C31950E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-12_e3be6ddecd1e49ba99e52abc81f0d3c5_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-12_e3be6ddecd1e49ba99e52abc81f0d3c5_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-12_e3be6ddecd1e49ba99e52abc81f0d3c5_cryptolocker_elex
- Size 43KB
- SHA256 ba5fa7f6c6844f93edef0e8d5f81ca59c940dd07f068570612487fddaa3bde00
- MD5 e3be6ddecd1e49ba99e52abc81f0d3c5
- SHA1 51a050de6f73f138799bdee580d2856179fdb2aa
- SHA512 8c19a31fda5955cf4b35a001a1153376464ba46a97787d4a69d48112dc8b10051dc94e0160671170ca8efb8b17655df9f52a920a7c4b10b6d1a0e940f42e4f67
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4Gg:lj+VGMOtEvwDpjoNMpBaGg
- TLSH T1D813A6366FC51932E3779B7595F782C2BA66BC563C31950E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE