General
- Target 2026-07-17_9e696e4d87e78280edf153317649e529_cryptolocker_elex
- Size 4.6MB
- Sample260718-c8p5hadx6l
- SHA256 79fe021219d19c9d0f233014b94702c75fa550d1228dfe040be27186cfac2ab8
- MD5 9e696e4d87e78280edf153317649e529
- SHA1 100268e54c9dcbf5f55bf6888e898d7c1f456194
- SHA512 44a3614c858df7cf7f3924ebad7eb14d823bd048b14ac384b4b4c190bf08d7b548d6c2609b602f475389a2afcd5aa2541c76b7b69e9549919b6f9f2a3ba93f7a
- SSDEEP 98304:uR/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTr:w/ZFIjBzF/ZFIjBzPEUusr
- TLSH T12F363C5BA8E650A4C8FAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-17_9e696e4d87e78280edf153317649e529_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-17_9e696e4d87e78280edf153317649e529_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-17_9e696e4d87e78280edf153317649e529_cryptolocker_elex
- Size 4.6MB
- SHA256 79fe021219d19c9d0f233014b94702c75fa550d1228dfe040be27186cfac2ab8
- MD5 9e696e4d87e78280edf153317649e529
- SHA1 100268e54c9dcbf5f55bf6888e898d7c1f456194
- SHA512 44a3614c858df7cf7f3924ebad7eb14d823bd048b14ac384b4b4c190bf08d7b548d6c2609b602f475389a2afcd5aa2541c76b7b69e9549919b6f9f2a3ba93f7a
- SSDEEP 98304:uR/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTr:w/ZFIjBzF/ZFIjBzPEUusr
- TLSH T12F363C5BA8E650A4C8FAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE