General
- Target 2026-07-28_a509a89abf96259ca120214d99448491_cryptolocker_elex
- Size 4.5MB
- Sample260728-2arywaxfjb
- SHA256 4fcb9f26fc07b0a17e6278252559e37bcad4e4598bc972f0c3f99283e88f6d24
- MD5 a509a89abf96259ca120214d99448491
- SHA1 4ac5db23d4683d29aa231e615f29481e89415070
- SHA512 db6bed1067c3c7d067ffb52b7fdd67a8d7f6a025e57838c2a8586b2bc0649567c71e41b343aac481309f4d501544dd58255fc8f5d10e51806ba7f446b326f50f
- SSDEEP 98304:g/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTO:g/ZFIjBzF/ZFIjBzPEUusO
- TLSH T152263C5FA8E650A4C8EAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-28_a509a89abf96259ca120214d99448491_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_a509a89abf96259ca120214d99448491_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_a509a89abf96259ca120214d99448491_cryptolocker_elex
- Size 4.5MB
- SHA256 4fcb9f26fc07b0a17e6278252559e37bcad4e4598bc972f0c3f99283e88f6d24
- MD5 a509a89abf96259ca120214d99448491
- SHA1 4ac5db23d4683d29aa231e615f29481e89415070
- SHA512 db6bed1067c3c7d067ffb52b7fdd67a8d7f6a025e57838c2a8586b2bc0649567c71e41b343aac481309f4d501544dd58255fc8f5d10e51806ba7f446b326f50f
- SSDEEP 98304:g/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTO:g/ZFIjBzF/ZFIjBzPEUusO
- TLSH T152263C5FA8E650A4C8EAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE