General
- Target 2026-07-18_5bf481b5eab4b2a90d13949559ea16f9_cryptolocker_elex
- Size 43KB
- Sample260718-ndfhcshw5m
- SHA256 b21eed02248ed56a48e33d8ae96ff37301b9d972150aaab2072aceafda571fa8
- MD5 5bf481b5eab4b2a90d13949559ea16f9
- SHA1 89e6dae424a0009ed4467fde278e5d330d494bdf
- SHA512 8408165d71e7d95903d3df48e33f9bab212ad65058c9952224fb10fd787cb665c658b0fcdbd94955ba9bbca2be891b5c2d39b497fde56116f6a871f045957808
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4G9:lj+VGMOtEvwDpjoNMpBaG9
- TLSH T1AD13A6366FC51532E3779B7595FB82C2BA66BC563C31990E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-18_5bf481b5eab4b2a90d13949559ea16f9_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_5bf481b5eab4b2a90d13949559ea16f9_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_5bf481b5eab4b2a90d13949559ea16f9_cryptolocker_elex
- Size 43KB
- SHA256 b21eed02248ed56a48e33d8ae96ff37301b9d972150aaab2072aceafda571fa8
- MD5 5bf481b5eab4b2a90d13949559ea16f9
- SHA1 89e6dae424a0009ed4467fde278e5d330d494bdf
- SHA512 8408165d71e7d95903d3df48e33f9bab212ad65058c9952224fb10fd787cb665c658b0fcdbd94955ba9bbca2be891b5c2d39b497fde56116f6a871f045957808
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4G9:lj+VGMOtEvwDpjoNMpBaG9
- TLSH T1AD13A6366FC51532E3779B7595FB82C2BA66BC563C31990E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE