General
- Target 2026-07-21_bb5ba8b27d54f998e258815209d9acf0_cryptolocker_elex
- Size 4.6MB
- Sample260721-t8np4seq6t
- SHA256 9a971286a2b76c535dac93c0488a673c94d3199538de6b8e8a7eacc1fd593788
- MD5 bb5ba8b27d54f998e258815209d9acf0
- SHA1 8e4fea6a10c05460984ab7e1ca5f84788bd30030
- SHA512 dbd84d66805cf887d5e0ad243553a0e52c60f13f6284b033a3964779f0d3efb948620a235fd5d56d16bfcf1cc30819ad47bc4841d58b4ac5089caffc321c7055
- SSDEEP 98304:uR/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTl:w/ZFIjBzF/ZFIjBzPEUusl
- TLSH T1DC363C5BA8E650A4C8FAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-21_bb5ba8b27d54f998e258815209d9acf0_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-21_bb5ba8b27d54f998e258815209d9acf0_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-21_bb5ba8b27d54f998e258815209d9acf0_cryptolocker_elex
- Size 4.6MB
- SHA256 9a971286a2b76c535dac93c0488a673c94d3199538de6b8e8a7eacc1fd593788
- MD5 bb5ba8b27d54f998e258815209d9acf0
- SHA1 8e4fea6a10c05460984ab7e1ca5f84788bd30030
- SHA512 dbd84d66805cf887d5e0ad243553a0e52c60f13f6284b033a3964779f0d3efb948620a235fd5d56d16bfcf1cc30819ad47bc4841d58b4ac5089caffc321c7055
- SSDEEP 98304:uR/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTl:w/ZFIjBzF/ZFIjBzPEUusl
- TLSH T1DC363C5BA8E650A4C8FAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE