General
- Target 2026-07-28_f88d9b4c9422a500d3dc5d123a6658da_cryptolocker_elex
- Size 48KB
- Sample260728-1lm9dsca34
- SHA256 6159a31a6ea17e6c6db695a0dd88af8eec49d8d17e333d5e460ccc6e40c6ebbc
- MD5 f88d9b4c9422a500d3dc5d123a6658da
- SHA1 ece47b8f12bf736dc3576553fc654e44bc38d3d8
- SHA512 168717f1a689f63bf51919bccac5bb892813a787ccdd5d3253e3752814acf4d7733d1cc44a8c8aa18e452180b276a472d0d3b519c9a267edf934ec3e5bda31e9
- SSDEEP 384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/BdmRSK:XS5nQJ24LR1bytOOtEvwDpjNbP/bmh
- TLSH T1E82353786BD91572E37BCAB5C6F682C2A935B8233C12D80D51DA63454C33F52ECA1A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-28_f88d9b4c9422a500d3dc5d123a6658da_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_f88d9b4c9422a500d3dc5d123a6658da_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_f88d9b4c9422a500d3dc5d123a6658da_cryptolocker_elex
- Size 48KB
- SHA256 6159a31a6ea17e6c6db695a0dd88af8eec49d8d17e333d5e460ccc6e40c6ebbc
- MD5 f88d9b4c9422a500d3dc5d123a6658da
- SHA1 ece47b8f12bf736dc3576553fc654e44bc38d3d8
- SHA512 168717f1a689f63bf51919bccac5bb892813a787ccdd5d3253e3752814acf4d7733d1cc44a8c8aa18e452180b276a472d0d3b519c9a267edf934ec3e5bda31e9
- SSDEEP 384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/BdmRSK:XS5nQJ24LR1bytOOtEvwDpjNbP/bmh
- TLSH T1E82353786BD91572E37BCAB5C6F682C2A935B8233C12D80D51DA63454C33F52ECA1A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE