General
- Target 2026-07-17_e6817b522f90a39820fd218923004da2_cryptolocker_elex
- Size 4.6MB
- Sample260718-b3j6mab18j
- SHA256 41beab2abbc4ce01867b6de2b47fff57b81d63be20e6dfec0787be29ee64a3b1
- MD5 e6817b522f90a39820fd218923004da2
- SHA1 1c2029d79d5a4ccaeec5854f384afa6f0e828304
- SHA512 bc99e7f5f72a80a0aa5768b474abe5efb80363faf9a442a576e8f15cc817dae32f8e3f856e634d6acb578704202b394cb7d531d9f9a50518caa9aa94f1318538
- SSDEEP 98304:uR/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTs:w/ZFIjBzF/ZFIjBzPEUuss
- TLSH T15F363C5BA8E650A4C8FAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-17_e6817b522f90a39820fd218923004da2_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_e6817b522f90a39820fd218923004da2_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_e6817b522f90a39820fd218923004da2_cryptolocker_elex
- Size 4.6MB
- SHA256 41beab2abbc4ce01867b6de2b47fff57b81d63be20e6dfec0787be29ee64a3b1
- MD5 e6817b522f90a39820fd218923004da2
- SHA1 1c2029d79d5a4ccaeec5854f384afa6f0e828304
- SHA512 bc99e7f5f72a80a0aa5768b474abe5efb80363faf9a442a576e8f15cc817dae32f8e3f856e634d6acb578704202b394cb7d531d9f9a50518caa9aa94f1318538
- SSDEEP 98304:uR/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTs:w/ZFIjBzF/ZFIjBzPEUuss
- TLSH T15F363C5BA8E650A4C8FAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE