General
- Target 2026-07-18_7edd024bda50ba93c02ad378cd695b42_cryptolocker_elex
- Size 43KB
- Sample260718-pyy1waby3k
- SHA256 a5ff46ac804f1da316ae95b1ee2e61b2287bce0c1d4cc2a34172df4073e5fcd6
- MD5 7edd024bda50ba93c02ad378cd695b42
- SHA1 3e362197744ab2633b3aaa93973cfc5b1cbc6952
- SHA512 8499f21877816e340e1f229ce3a73edf6e1a27c2ad7e5f11727118a8a149c1e7c84051622ba5b4bbf0e0c1b481d3dfe9ca106de84bdb28a33a74c367a47bb2f9
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4Gy:lj+VGMOtEvwDpjoNMpBaGy
- TLSH T10B13A6366FC51932E3779B7595FB82C2BA66BC563C31950E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-07-18_7edd024bda50ba93c02ad378cd695b42_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-18_7edd024bda50ba93c02ad378cd695b42_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-18_7edd024bda50ba93c02ad378cd695b42_cryptolocker_elex
- Size 43KB
- SHA256 a5ff46ac804f1da316ae95b1ee2e61b2287bce0c1d4cc2a34172df4073e5fcd6
- MD5 7edd024bda50ba93c02ad378cd695b42
- SHA1 3e362197744ab2633b3aaa93973cfc5b1cbc6952
- SHA512 8499f21877816e340e1f229ce3a73edf6e1a27c2ad7e5f11727118a8a149c1e7c84051622ba5b4bbf0e0c1b481d3dfe9ca106de84bdb28a33a74c367a47bb2f9
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBN4Gy:lj+VGMOtEvwDpjoNMpBaGy
- TLSH T10B13A6366FC51932E3779B7595FB82C2BA66BC563C31950E918A33054C33B02EDA1E1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE