General
- Target 2026-07-30_5a1f59cc8e9747f892c8c6f786319c0c_cryptolocker_elex
- Size 4.6MB
- Sample260730-bv7xqaaa76
- SHA256 f41743e8ccd2fa9dd1ffab47786a29d8ed8f2f17aadbb0d19b135cdf52481029
- MD5 5a1f59cc8e9747f892c8c6f786319c0c
- SHA1 00f81132a4bc87559aa27fa30d95f8bb54a0305b
- SHA512 35f865b60e7a6d26db02a21c9982465fe4c8d0afb3e513df1e70bcb508263e3346849029862e292f04f5fe0ab665c97f581e00d2a5007cfa81500d0163000681
- SSDEEP 98304:uR/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymT8:w/ZFIjBzF/ZFIjBzPEUus8
- TLSH T1EB363C5BA8E650A4C8FAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-07-30_5a1f59cc8e9747f892c8c6f786319c0c_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-30_5a1f59cc8e9747f892c8c6f786319c0c_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-30_5a1f59cc8e9747f892c8c6f786319c0c_cryptolocker_elex
- Size 4.6MB
- SHA256 f41743e8ccd2fa9dd1ffab47786a29d8ed8f2f17aadbb0d19b135cdf52481029
- MD5 5a1f59cc8e9747f892c8c6f786319c0c
- SHA1 00f81132a4bc87559aa27fa30d95f8bb54a0305b
- SHA512 35f865b60e7a6d26db02a21c9982465fe4c8d0afb3e513df1e70bcb508263e3346849029862e292f04f5fe0ab665c97f581e00d2a5007cfa81500d0163000681
- SSDEEP 98304:uR/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymT8:w/ZFIjBzF/ZFIjBzPEUus8
- TLSH T1EB363C5BA8E650A4C8FAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE