General
- Target 2026-08-04_39c7d23c4b0730249c2dfbd934e2eefb_cryptolocker_elex
- Size 3.4MB
- Sample260804-jjee2aal3w
- SHA256 a026f8a4046db4061dc94df823266d68e9b69930115b22d2cbea855a2e3adf47
- MD5 39c7d23c4b0730249c2dfbd934e2eefb
- SHA1 33d7a6ccdcbd5f8ba0d85748db93b15c69b438d0
- SHA512 b7f568d53003b03c39b63bf0092da0a93dbd111afcec53784f4976e7f894d00e7613794c174951b3a904a0b93120d982cdedbef945f6e8a73afb678f95074f7a
- SSDEEP 49152:uR/ZFIjBzT1CIdSPHf0f/ZFIjBzGAyGs+Q7uOZzNvBLEdff:uR/ZFIjBzldUfs/ZFIjBz7jSZDa
- TLSH T1B7F55C6F68A611A4DCFAC8305BE9F222FF6334594739A7F31AA091201F25BD1F875712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-04_39c7d23c4b0730249c2dfbd934e2eefb_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_39c7d23c4b0730249c2dfbd934e2eefb_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_39c7d23c4b0730249c2dfbd934e2eefb_cryptolocker_elex
- Size 3.4MB
- SHA256 a026f8a4046db4061dc94df823266d68e9b69930115b22d2cbea855a2e3adf47
- MD5 39c7d23c4b0730249c2dfbd934e2eefb
- SHA1 33d7a6ccdcbd5f8ba0d85748db93b15c69b438d0
- SHA512 b7f568d53003b03c39b63bf0092da0a93dbd111afcec53784f4976e7f894d00e7613794c174951b3a904a0b93120d982cdedbef945f6e8a73afb678f95074f7a
- SSDEEP 49152:uR/ZFIjBzT1CIdSPHf0f/ZFIjBzGAyGs+Q7uOZzNvBLEdff:uR/ZFIjBzldUfs/ZFIjBz7jSZDa
- TLSH T1B7F55C6F68A611A4DCFAC8305BE9F222FF6334594739A7F31AA091201F25BD1F875712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE