General
- Target 2026-07-29_a045ea3c632e612debba3403e234a79e_cryptolocker_elex
- Size 49KB
- Sample260729-2bmqjsfg82
- SHA256 92b41fb8c526db4f4a09f00b5bfc36bc5e6884380413fb5f28e97746004b7389
- MD5 a045ea3c632e612debba3403e234a79e
- SHA1 aeaf3defa0430acc2a8344b298b70effbb331c39
- SHA512 19435c94d5fbccc24e4d5e741c4e98fe86201c6f9f2565eb5f7682471e071c2ed08fd90b26ace8ca11241cd3047a360eeddf6e9673e679020144b863b2a96808
- SSDEEP 384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/BdmRSp:XS5nQJ24LR1bytOOtEvwDpjNbP/bm6
- TLSH T15E3352786BD91572E37BCAB5C6F682C2A935B8233C12D80D51DA63454C33F52ECA1A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-29_a045ea3c632e612debba3403e234a79e_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_a045ea3c632e612debba3403e234a79e_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_a045ea3c632e612debba3403e234a79e_cryptolocker_elex
- Size 49KB
- SHA256 92b41fb8c526db4f4a09f00b5bfc36bc5e6884380413fb5f28e97746004b7389
- MD5 a045ea3c632e612debba3403e234a79e
- SHA1 aeaf3defa0430acc2a8344b298b70effbb331c39
- SHA512 19435c94d5fbccc24e4d5e741c4e98fe86201c6f9f2565eb5f7682471e071c2ed08fd90b26ace8ca11241cd3047a360eeddf6e9673e679020144b863b2a96808
- SSDEEP 384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/BdmRSp:XS5nQJ24LR1bytOOtEvwDpjNbP/bm6
- TLSH T15E3352786BD91572E37BCAB5C6F682C2A935B8233C12D80D51DA63454C33F52ECA1A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE