General
- Target 2026-08-07_c931b32399887009669462a7c82d7eb9_cryptolocker_elex
- Size 48KB
- Sample260807-yf1lesvybs
- SHA256 7f318faca877f92be18beaeea906f3b24faedf6633407c273caa0d85c5d27e41
- MD5 c931b32399887009669462a7c82d7eb9
- SHA1 d37d4f0fe1e565d8419b083b1f95c51bbe3dc043
- SHA512 9b761eb803308560de3f1a27cf2de30bda7feb7c0cde62476b3b51d1f6dcb9c0e09e89914309b2771286341563ab4f990beb16055e1c5a77e84872937eccd33f
- SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uXADHAAHD+ltIple:i5nkFGMOtEvwDpjNbwQDfj+laLe
- TLSH T1102331786ED91572E3B7CA75C5F685C2B935B8233C129C0E41CA63454C33F16ECA2A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-07_c931b32399887009669462a7c82d7eb9_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_c931b32399887009669462a7c82d7eb9_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_c931b32399887009669462a7c82d7eb9_cryptolocker_elex
- Size 48KB
- SHA256 7f318faca877f92be18beaeea906f3b24faedf6633407c273caa0d85c5d27e41
- MD5 c931b32399887009669462a7c82d7eb9
- SHA1 d37d4f0fe1e565d8419b083b1f95c51bbe3dc043
- SHA512 9b761eb803308560de3f1a27cf2de30bda7feb7c0cde62476b3b51d1f6dcb9c0e09e89914309b2771286341563ab4f990beb16055e1c5a77e84872937eccd33f
- SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uXADHAAHD+ltIple:i5nkFGMOtEvwDpjNbwQDfj+laLe
- TLSH T1102331786ED91572E3B7CA75C5F685C2B935B8233C129C0E41CA63454C33F16ECA2A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE