General
- Target 2026-07-28_0c78c5f732e0be4a81f5d6a75bf243ce_cryptolocker_elex
- Size 48KB
- Sample260728-3mae2ayhmc
- SHA256 112e5b666e2d3b7802afd55c92eda1c67d85d117333b60115d5ee5e943a368db
- MD5 0c78c5f732e0be4a81f5d6a75bf243ce
- SHA1 644926d4b957aeed7056b85b1053d8c3938aebbd
- SHA512 2abec22ac74ce47a317938631da223a02371118a280c1b17194ea4355b3ec73d2df02527e1f6ffe60ace2a8586625e2375cd41036488411fa45c03af86e25da0
- SSDEEP 384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/BdmRS+:XS5nQJ24LR1bytOOtEvwDpjNbP/bmF
- TLSH T1672353786BD91572E37BCAB5C6F682C2A935B8233C12D80D51DA63454C33F52ECA1A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-28_0c78c5f732e0be4a81f5d6a75bf243ce_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-28_0c78c5f732e0be4a81f5d6a75bf243ce_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-28_0c78c5f732e0be4a81f5d6a75bf243ce_cryptolocker_elex
- Size 48KB
- SHA256 112e5b666e2d3b7802afd55c92eda1c67d85d117333b60115d5ee5e943a368db
- MD5 0c78c5f732e0be4a81f5d6a75bf243ce
- SHA1 644926d4b957aeed7056b85b1053d8c3938aebbd
- SHA512 2abec22ac74ce47a317938631da223a02371118a280c1b17194ea4355b3ec73d2df02527e1f6ffe60ace2a8586625e2375cd41036488411fa45c03af86e25da0
- SSDEEP 384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/BdmRS+:XS5nQJ24LR1bytOOtEvwDpjNbP/bmF
- TLSH T1672353786BD91572E37BCAB5C6F682C2A935B8233C12D80D51DA63454C33F52ECA1A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE