General
- Target 2026-07-29_37a7422356efff7262452f03279140a0_cryptolocker_elex
- Size 48KB
- Sample260729-kfdvrs11bs
- SHA256 fd6d5c6e6cbad1096097b45e3ca82f94293f0778a0df71c5e58678c7eb6b0d8f
- MD5 37a7422356efff7262452f03279140a0
- SHA1 5545c5763098b93b7691f6a4ee59dcada8972e99
- SHA512 258bcc16bae7b7c7d90d444dfcefdb658c84daf842eb7c7a9520fbbf7bcb82042176722805660fac069bdae4cd4515a8432052a0cecfdd5537d101f0832388b7
- SSDEEP 384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/BdmRSl:XS5nQJ24LR1bytOOtEvwDpjNbP/bmu
- TLSH T1852352786BD91572E37BCAB5C6F682C2A935B8233C12D80D51DA63454C33F52ECA1A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-29_37a7422356efff7262452f03279140a0_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-29_37a7422356efff7262452f03279140a0_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-29_37a7422356efff7262452f03279140a0_cryptolocker_elex
- Size 48KB
- SHA256 fd6d5c6e6cbad1096097b45e3ca82f94293f0778a0df71c5e58678c7eb6b0d8f
- MD5 37a7422356efff7262452f03279140a0
- SHA1 5545c5763098b93b7691f6a4ee59dcada8972e99
- SHA512 258bcc16bae7b7c7d90d444dfcefdb658c84daf842eb7c7a9520fbbf7bcb82042176722805660fac069bdae4cd4515a8432052a0cecfdd5537d101f0832388b7
- SSDEEP 384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/BdmRSl:XS5nQJ24LR1bytOOtEvwDpjNbP/bmu
- TLSH T1852352786BD91572E37BCAB5C6F682C2A935B8233C12D80D51DA63454C33F52ECA1A1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE