General
- Target 2026-08-02_0c9b39568088576d5ddaefe3bd754e2b_cryptolocker_elex
- Size 38KB
- Sample260802-k5m5qszcrf
- SHA256 69e0970462ef82cf82f59d7ba7f22ce5cba5a3352bd8c724ef8b31dfa64a8c42
- MD5 0c9b39568088576d5ddaefe3bd754e2b
- SHA1 ad087d4b39dd54903152aa6c09b89a65f2a52991
- SHA512 60b0504cc7a23390624ea4a111f653c2363db6fbe53e46327e475e57ddc0e1430a0f98c94e424a6656e265e4170830ad223927019e786840e00b6648e1d40b55
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWfcOj11:lj+VGMOtEvwDpjcRjv
- TLSH T198031932AFC51922E2379B7099FBC282BB67BC563C31550E958A33054D33B42ADA1D5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-02_0c9b39568088576d5ddaefe3bd754e2b_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_0c9b39568088576d5ddaefe3bd754e2b_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_0c9b39568088576d5ddaefe3bd754e2b_cryptolocker_elex
- Size 38KB
- SHA256 69e0970462ef82cf82f59d7ba7f22ce5cba5a3352bd8c724ef8b31dfa64a8c42
- MD5 0c9b39568088576d5ddaefe3bd754e2b
- SHA1 ad087d4b39dd54903152aa6c09b89a65f2a52991
- SHA512 60b0504cc7a23390624ea4a111f653c2363db6fbe53e46327e475e57ddc0e1430a0f98c94e424a6656e265e4170830ad223927019e786840e00b6648e1d40b55
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWfcOj11:lj+VGMOtEvwDpjcRjv
- TLSH T198031932AFC51922E2379B7099FBC282BB67BC563C31550E958A33054D33B42ADA1D5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE