General
- Target 2026-07-15_3540048e3c0988de774f236139db2a7f_cryptolocker_elex
- Size 43KB
- Sample260715-pgc23sb19l
- SHA256 2f1068556e48785e0972b2a8c6b0545c42946f89cbe4ece5347a2feb56f313f1
- MD5 3540048e3c0988de774f236139db2a7f
- SHA1 a9d5dfbc1282ef334c37b3f49e8b8bbb95c7598a
- SHA512 1cbc4da28a1b5497cac6990ecbdbaff02c3fb5108dc7c71802855c9f5f280f4664449157f883a111c38602ab5ce6bd069d1833b96ea12a6f6de182f9c8afab89
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4Gd:lj+VGMOtEvwDpjoNMpBaGd
- TLSH T1FD13B6366FC51932E3779B7595FB82C2BA66BC563C31950E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-15_3540048e3c0988de774f236139db2a7f_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-15_3540048e3c0988de774f236139db2a7f_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-15_3540048e3c0988de774f236139db2a7f_cryptolocker_elex
- Size 43KB
- SHA256 2f1068556e48785e0972b2a8c6b0545c42946f89cbe4ece5347a2feb56f313f1
- MD5 3540048e3c0988de774f236139db2a7f
- SHA1 a9d5dfbc1282ef334c37b3f49e8b8bbb95c7598a
- SHA512 1cbc4da28a1b5497cac6990ecbdbaff02c3fb5108dc7c71802855c9f5f280f4664449157f883a111c38602ab5ce6bd069d1833b96ea12a6f6de182f9c8afab89
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4Gd:lj+VGMOtEvwDpjoNMpBaGd
- TLSH T1FD13B6366FC51932E3779B7595FB82C2BA66BC563C31950E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE