General
- Target 2026-08-05_03fb6e381f07d3b7a40444df48cf93fe_cryptolocker_elex
- Size 26KB
- Sample260806-azm8fazdrc
- SHA256 15128f7604e833dbec548b91294e6f03a0ab5c410e091ef282076367fdf846de
- MD5 03fb6e381f07d3b7a40444df48cf93fe
- SHA1 9d57e974c7959d311e63810d873dfadd4e5ee4c2
- SHA512 8525bce3ca99af4ef862056d4ff46a796c364a87ff8f61823affef86494fd91ff559d20feee458306cf522aa0f6dd6fa3f7ac54926da9508bccc5002b6fc6150
- SSDEEP 768:au8C7MpHBcdlg94HgJUAtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGG9OG:db2ag9tJrtdgI2MyzNORQtOflIwoHNV+
- TLSH T1D4C2F970BFC854D1E5B32277F8BBA5D164267E5D2426890C218A7F458AF3391B4B1D0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-05_03fb6e381f07d3b7a40444df48cf93fe_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-05_03fb6e381f07d3b7a40444df48cf93fe_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-05_03fb6e381f07d3b7a40444df48cf93fe_cryptolocker_elex
- Size 26KB
- SHA256 15128f7604e833dbec548b91294e6f03a0ab5c410e091ef282076367fdf846de
- MD5 03fb6e381f07d3b7a40444df48cf93fe
- SHA1 9d57e974c7959d311e63810d873dfadd4e5ee4c2
- SHA512 8525bce3ca99af4ef862056d4ff46a796c364a87ff8f61823affef86494fd91ff559d20feee458306cf522aa0f6dd6fa3f7ac54926da9508bccc5002b6fc6150
- SSDEEP 768:au8C7MpHBcdlg94HgJUAtdgI2MyzNORQtOflIwoHNV2XBFV72BOlA7ZsBGG9OG:db2ag9tJrtdgI2MyzNORQtOflIwoHNV+
- TLSH T1D4C2F970BFC854D1E5B32277F8BBA5D164267E5D2426890C218A7F458AF3391B4B1D0F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE