General
- Target 2026-08-04_6889adef75914805950c13dcf86a2c38_cryptolocker_elex
- Size 40KB
- Sample260804-ymnv7sw1c1
- SHA256 de03896c55bf79e907736feb30a2fb4321c7a7b2e63ac5323da8e9173e40df77
- MD5 6889adef75914805950c13dcf86a2c38
- SHA1 ee70810604061860e0b5136b9f895b3128f6a44c
- SHA512 0d744adaca463157f47523834e52e3c1627a53b6dc080d749502e2bae483ce81e369b84d4b9d18ab121c1099c7c87ba2b08b9a6243a8083b420e9dfb690c80af
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBVp:lj+VGMOtEvwDpjoNMpBVp
- TLSH T16113E736AFC51932D2779B7195FB8282B626BC563D31990E918B33054D33B02EDA1D2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-04_6889adef75914805950c13dcf86a2c38_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-04_6889adef75914805950c13dcf86a2c38_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-04_6889adef75914805950c13dcf86a2c38_cryptolocker_elex
- Size 40KB
- SHA256 de03896c55bf79e907736feb30a2fb4321c7a7b2e63ac5323da8e9173e40df77
- MD5 6889adef75914805950c13dcf86a2c38
- SHA1 ee70810604061860e0b5136b9f895b3128f6a44c
- SHA512 0d744adaca463157f47523834e52e3c1627a53b6dc080d749502e2bae483ce81e369b84d4b9d18ab121c1099c7c87ba2b08b9a6243a8083b420e9dfb690c80af
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWpN+Mw5XBVp:lj+VGMOtEvwDpjoNMpBVp
- TLSH T16113E736AFC51932D2779B7195FB8282B626BC563D31990E918B33054D33B02EDA1D2F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE