General
- Target 2026-08-07_1df934a3b1623ec5c1a3086d6da5c08a_cryptolocker_elex
- Size 48KB
- Sample260807-yqrfhasfmb
- SHA256 e2d402f87ae5f0bcae4575a8ef3e7b817e60f0501bb63d2ed3406c5e04dd9608
- MD5 1df934a3b1623ec5c1a3086d6da5c08a
- SHA1 e40999f3708a82245add386effca7ed5bbe28dab
- SHA512 accb35b5ff6b99102bc7d7d78e3b2259debd792452fcb88909f2b31ef8a6d88e1eb271de4db71c12261f975b651c0c74395c510c2954e0480135f17f8d2dc21f
- SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uXADHAAHD+ltIplU:i5nkFGMOtEvwDpjNbwQDfj+laLU
- TLSH T19F2331786ED91572E3B7CA75C9F685C2B935B8233C129C0E41CA63454C33F16ECA2A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-07_1df934a3b1623ec5c1a3086d6da5c08a_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-07_1df934a3b1623ec5c1a3086d6da5c08a_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-07_1df934a3b1623ec5c1a3086d6da5c08a_cryptolocker_elex
- Size 48KB
- SHA256 e2d402f87ae5f0bcae4575a8ef3e7b817e60f0501bb63d2ed3406c5e04dd9608
- MD5 1df934a3b1623ec5c1a3086d6da5c08a
- SHA1 e40999f3708a82245add386effca7ed5bbe28dab
- SHA512 accb35b5ff6b99102bc7d7d78e3b2259debd792452fcb88909f2b31ef8a6d88e1eb271de4db71c12261f975b651c0c74395c510c2954e0480135f17f8d2dc21f
- SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uXADHAAHD+ltIplU:i5nkFGMOtEvwDpjNbwQDfj+laLU
- TLSH T19F2331786ED91572E3B7CA75C9F685C2B935B8233C129C0E41CA63454C33F16ECA2A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE