General
- Target 2026-08-01_811437efd2af28f8acb6aa7487f87e80_cryptolocker_elex
- Size 40KB
- Sample260802-epfg3aszds
- SHA256 4205d78dc2fe0f407f1f59ca503cbd931352515e9ac28297fc7590e9d92e6361
- MD5 811437efd2af28f8acb6aa7487f87e80
- SHA1 e1bd042818057a59cbe4b30446e69662c9eb196b
- SHA512 ea8d41b316916f2abe840f60e57d7de6ec8763f4c65716c9ff58778f5c2107520a9e4cd5052c943cbca70efee8dd2af1aa7b5e305965cbab449b37219d83697f
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBVXt:lj+VGMOtEvwDpjoNMpBVXt
- TLSH T19613D736AFC50532D2779B7195FB8282BA26BC563D31990E958B33054D33B02EDA1D2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-01_811437efd2af28f8acb6aa7487f87e80_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-01_811437efd2af28f8acb6aa7487f87e80_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-01_811437efd2af28f8acb6aa7487f87e80_cryptolocker_elex
- Size 40KB
- SHA256 4205d78dc2fe0f407f1f59ca503cbd931352515e9ac28297fc7590e9d92e6361
- MD5 811437efd2af28f8acb6aa7487f87e80
- SHA1 e1bd042818057a59cbe4b30446e69662c9eb196b
- SHA512 ea8d41b316916f2abe840f60e57d7de6ec8763f4c65716c9ff58778f5c2107520a9e4cd5052c943cbca70efee8dd2af1aa7b5e305965cbab449b37219d83697f
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBVXt:lj+VGMOtEvwDpjoNMpBVXt
- TLSH T19613D736AFC50532D2779B7195FB8282BA26BC563D31990E958B33054D33B02EDA1D2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE