2026-08-01_6b0d0ac3a720f2d244e0208fa19d40ad_cryptowall_elex

General

Target
2026-08-01_6b0d0ac3a720f2d244e0208fa19d40ad_cryptowall_elex
Size 121KB
Sample260801-dpfbmadl8x
SHA256 76a3f440982a3796379a3100501477ac87fda17f356e5beecb28798b4b222052
MD5 6b0d0ac3a720f2d244e0208fa19d40ad
SHA1 2de426ef8018e32e2cad4538491743b8af7f8cb8
SHA512 0ee24dd8c5706ca2d6bd8e17cdfca573738cd0179e8fab6ce4fc8b73244a80bc00925c2f1395e0e5f978a6690496e2686baddde68caa57477be12a3859d328b0
SSDEEP 3072:7M+gqvcU3ugZHGDyIn6sBkly7gzFs6VPUPRkUo7xhg+PP/:XgqCgZHGegBksws0PUP2Lw+PP/
TLSH
T147C3FC10D060C37EE4A240FAC7E90DBDB8358E60235645C772C23F796B95EE5AB31B69
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects ransomware indicator 1 IoCs

resource	yara_rule
sample	SUSP_RANSOMWARE_Indicator_Jul20

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-01_6b0d0ac3a720f2d244e0208fa19d40ad_cryptowall_elex

SHA256 76a3f440982a3796379a3100501477ac87fda17f356e5beecb28798b4b222052
MD5 6b0d0ac3a720f2d244e0208fa19d40ad
SHA1 2de426ef8018e32e2cad4538491743b8af7f8cb8
SHA512 0ee24dd8c5706ca2d6bd8e17cdfca573738cd0179e8fab6ce4fc8b73244a80bc00925c2f1395e0e5f978a6690496e2686baddde68caa57477be12a3859d328b0
SSDEEP 3072:7M+gqvcU3ugZHGDyIn6sBkly7gzFs6VPUPRkUo7xhg+PP/:XgqCgZHGegBksws0PUP2Lw+PP/
TLSH
T147C3FC10D060C37EE4A240FAC7E90DBDB8358E60235645C772C23F796B95EE5AB31B69
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

90912

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths