2026-08-07_1df934a3b1623ec5c1a3086d6da5c08a_cryptolocker_elex

General

Target
2026-08-07_1df934a3b1623ec5c1a3086d6da5c08a_cryptolocker_elex
Size 48KB
Sample260807-yqrfhasfmb
SHA256 e2d402f87ae5f0bcae4575a8ef3e7b817e60f0501bb63d2ed3406c5e04dd9608
MD5 1df934a3b1623ec5c1a3086d6da5c08a
SHA1 e40999f3708a82245add386effca7ed5bbe28dab
SHA512 accb35b5ff6b99102bc7d7d78e3b2259debd792452fcb88909f2b31ef8a6d88e1eb271de4db71c12261f975b651c0c74395c510c2954e0480135f17f8d2dc21f
SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uXADHAAHD+ltIplU:i5nkFGMOtEvwDpjNbwQDfj+laLU
TLSH
T19F2331786ED91572E3B7CA75C9F685C2B935B8233C129C0E41CA63454C33F16ECA2A1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-07_1df934a3b1623ec5c1a3086d6da5c08a_cryptolocker_elex

IMPHASH e021c9fc2c12265365fad587d43783fe
SHA256 e2d402f87ae5f0bcae4575a8ef3e7b817e60f0501bb63d2ed3406c5e04dd9608
MD5 1df934a3b1623ec5c1a3086d6da5c08a
SHA1 e40999f3708a82245add386effca7ed5bbe28dab
SHA512 accb35b5ff6b99102bc7d7d78e3b2259debd792452fcb88909f2b31ef8a6d88e1eb271de4db71c12261f975b651c0c74395c510c2954e0480135f17f8d2dc21f
SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uXADHAAHD+ltIplU:i5nkFGMOtEvwDpjNbwQDfj+laLU
TLSH
T19F2331786ED91572E3B7CA75C9F685C2B935B8233C129C0E41CA63454C33F16ECA2A1E
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

41183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths