General
- Target 2026-08-02_b3dca8c5182f8f539dcaa235423914a3_cryptolocker_elex
- Size 39KB
- Sample260802-q5587stgpc
- SHA256 dc3319a6eaaad21660192af8de340644fb7019bc57599dc27e55ecf00047ae5e
- MD5 b3dca8c5182f8f539dcaa235423914a3
- SHA1 0c1667f7affa59e99fd58f0e278166aa4712c560
- SHA512 7bc7dc85caed39c7c672f4db6c22b1c851a6ff7cd80056bc50cb52ae6e16e61a54b9f0c627f766c26f11ad21fd382568116189e9a4623e83c0513003b7c22c6b
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWfcOj12:lj+VGMOtEvwDpjcRjw
- TLSH T10D031932AFC50522E2379B7199FBC282BB67BC563C31550E958A33054D33B42ADA1D5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-02_b3dca8c5182f8f539dcaa235423914a3_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-02_b3dca8c5182f8f539dcaa235423914a3_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-02_b3dca8c5182f8f539dcaa235423914a3_cryptolocker_elex
- Size 39KB
- SHA256 dc3319a6eaaad21660192af8de340644fb7019bc57599dc27e55ecf00047ae5e
- MD5 b3dca8c5182f8f539dcaa235423914a3
- SHA1 0c1667f7affa59e99fd58f0e278166aa4712c560
- SHA512 7bc7dc85caed39c7c672f4db6c22b1c851a6ff7cd80056bc50cb52ae6e16e61a54b9f0c627f766c26f11ad21fd382568116189e9a4623e83c0513003b7c22c6b
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWfcOj12:lj+VGMOtEvwDpjcRjw
- TLSH T10D031932AFC50522E2379B7199FBC282BB67BC563C31550E958A33054D33B42ADA1D5F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE