General
- Target 2026-08-02_9543fdf2c4c1bb9336aefbaf67fe60bd_cryptolocker_elex
- Size 26KB
- Sample260802-1cgp9aga88
- SHA256 5b6c106f7364e5442161fe6700b8bcab0992b887b262fe25a45426d1204ba041
- MD5 9543fdf2c4c1bb9336aefbaf67fe60bd
- SHA1 1587de7f8f01431527e91fa2c6f4e02070e60734
- SHA512 07c584e01c4cab89c47d61dacd39a57ab4da9c14e4140f0af91457aeeb2ef685d5684c3d8d5158c1707dab295cb4b48314cf38e265a80ec6247fd303c40fdef8
- SSDEEP 768:au8C7MpHBcdlg94HgJUAtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGG9OH:db2ag9tJrtdgI2MyzNORQtOflIwoHNVv
- TLSH T1ECC20870BFC854D1E5B32277F8BBA5D164267E9D2426890C218A7F458BF3391B4B190F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-02_9543fdf2c4c1bb9336aefbaf67fe60bd_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_9543fdf2c4c1bb9336aefbaf67fe60bd_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_9543fdf2c4c1bb9336aefbaf67fe60bd_cryptolocker_elex
- Size 26KB
- SHA256 5b6c106f7364e5442161fe6700b8bcab0992b887b262fe25a45426d1204ba041
- MD5 9543fdf2c4c1bb9336aefbaf67fe60bd
- SHA1 1587de7f8f01431527e91fa2c6f4e02070e60734
- SHA512 07c584e01c4cab89c47d61dacd39a57ab4da9c14e4140f0af91457aeeb2ef685d5684c3d8d5158c1707dab295cb4b48314cf38e265a80ec6247fd303c40fdef8
- SSDEEP 768:au8C7MpHBcdlg94HgJUAtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGG9OH:db2ag9tJrtdgI2MyzNORQtOflIwoHNVv
- TLSH T1ECC20870BFC854D1E5B32277F8BBA5D164267E9D2426890C218A7F458BF3391B4B190F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE