General
- Target 2026-08-06_831f2ff0b52b1415bb02a309c37eaa5a_cryptolocker_elex
- Size 3.4MB
- Sample260806-vl8mfawdpc
- SHA256 827ee0adc31e3db7e7a83fc7afc916f6c2c433c9bf83a06c84097a47b3dfe00f
- MD5 831f2ff0b52b1415bb02a309c37eaa5a
- SHA1 2a6e4fe95fa1a38816adff2af7b43238a0fc06f9
- SHA512 aebf73d26b7cf8341e65987043b95dbaa48a99bda59c8a76ce1a6efd55d3c02ab5993d221744d17206bd6a5210a6f2637ed3c71cb9536e1bc5a197318706ba73
- SSDEEP 49152:uR/ZFIjBzT1CIdSPHf0f/ZFIjBzGAyGs+Q7uOZzNvBLEdfc:uR/ZFIjBzldUfs/ZFIjBz7jSZDF
- TLSH T155F55C6F68A611A4DCFAC8305BE9F222FF6334594739A7F31AA091201F25BD1F875712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-06_831f2ff0b52b1415bb02a309c37eaa5a_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-06_831f2ff0b52b1415bb02a309c37eaa5a_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-06_831f2ff0b52b1415bb02a309c37eaa5a_cryptolocker_elex
- Size 3.4MB
- SHA256 827ee0adc31e3db7e7a83fc7afc916f6c2c433c9bf83a06c84097a47b3dfe00f
- MD5 831f2ff0b52b1415bb02a309c37eaa5a
- SHA1 2a6e4fe95fa1a38816adff2af7b43238a0fc06f9
- SHA512 aebf73d26b7cf8341e65987043b95dbaa48a99bda59c8a76ce1a6efd55d3c02ab5993d221744d17206bd6a5210a6f2637ed3c71cb9536e1bc5a197318706ba73
- SSDEEP 49152:uR/ZFIjBzT1CIdSPHf0f/ZFIjBzGAyGs+Q7uOZzNvBLEdfc:uR/ZFIjBzldUfs/ZFIjBz7jSZDF
- TLSH T155F55C6F68A611A4DCFAC8305BE9F222FF6334594739A7F31AA091201F25BD1F875712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE