General
- Target 2026-07-17_843aca10924ab30ad14c390b03826180_cryptolocker_elex
- Size 43KB
- Sample260717-14hrmaft8j
- SHA256 0fa9e1ea0e7fe94854d0e7649fbab64edb70d1132e9a3e4feb533af8227a8102
- MD5 843aca10924ab30ad14c390b03826180
- SHA1 70b2c3b8d9ec575b6dbab8064d2e687b8ffec213
- SHA512 2da19d29a62eb11ed68b21aeaaabc87b1d4421bda2dc14a4493a695ff043c71bd4bbbaf5b90ea50346f06c583d94ca5464dd86d9f5a5837dba2d1563e8bd58b3
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4d0u:lj+VGMOtEvwDpjoNMpBad0u
- TLSH T1E313C6366FC51932E3779B7595FB82C2BA66BC563C31950E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-17_843aca10924ab30ad14c390b03826180_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_843aca10924ab30ad14c390b03826180_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_843aca10924ab30ad14c390b03826180_cryptolocker_elex
- Size 43KB
- SHA256 0fa9e1ea0e7fe94854d0e7649fbab64edb70d1132e9a3e4feb533af8227a8102
- MD5 843aca10924ab30ad14c390b03826180
- SHA1 70b2c3b8d9ec575b6dbab8064d2e687b8ffec213
- SHA512 2da19d29a62eb11ed68b21aeaaabc87b1d4421bda2dc14a4493a695ff043c71bd4bbbaf5b90ea50346f06c583d94ca5464dd86d9f5a5837dba2d1563e8bd58b3
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4d0u:lj+VGMOtEvwDpjoNMpBad0u
- TLSH T1E313C6366FC51932E3779B7595FB82C2BA66BC563C31950E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE