General
- Target 2026-08-01_6b0d0ac3a720f2d244e0208fa19d40ad_cryptowall_elex
- Size 121KB
- Sample260801-dpfbmadl8x
- SHA256 76a3f440982a3796379a3100501477ac87fda17f356e5beecb28798b4b222052
- MD5 6b0d0ac3a720f2d244e0208fa19d40ad
- SHA1 2de426ef8018e32e2cad4538491743b8af7f8cb8
- SHA512 0ee24dd8c5706ca2d6bd8e17cdfca573738cd0179e8fab6ce4fc8b73244a80bc00925c2f1395e0e5f978a6690496e2686baddde68caa57477be12a3859d328b0
- SSDEEP 3072:7M+gqvcU3ugZHGDyIn6sBkly7gzFs6VPUPRkUo7xhg+PP/:XgqCgZHGegBksws0PUP2Lw+PP/
- TLSH T147C3FC10D060C37EE4A240FAC7E90DBDB8358E60235645C772C23F796B95EE5AB31B69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-01_6b0d0ac3a720f2d244e0208fa19d40ad_cryptowall_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_6b0d0ac3a720f2d244e0208fa19d40ad_cryptowall_elex.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_6b0d0ac3a720f2d244e0208fa19d40ad_cryptowall_elex
- Size 121KB
- SHA256 76a3f440982a3796379a3100501477ac87fda17f356e5beecb28798b4b222052
- MD5 6b0d0ac3a720f2d244e0208fa19d40ad
- SHA1 2de426ef8018e32e2cad4538491743b8af7f8cb8
- SHA512 0ee24dd8c5706ca2d6bd8e17cdfca573738cd0179e8fab6ce4fc8b73244a80bc00925c2f1395e0e5f978a6690496e2686baddde68caa57477be12a3859d328b0
- SSDEEP 3072:7M+gqvcU3ugZHGDyIn6sBkly7gzFs6VPUPRkUo7xhg+PP/:XgqCgZHGegBksws0PUP2Lw+PP/
- TLSH T147C3FC10D060C37EE4A240FAC7E90DBDB8358E60235645C772C23F796B95EE5AB31B69
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects ransomware indicator
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application