General
- Target 2026-08-08_e7b03d1899c8593af14ab93843e40ea9_cryptolocker_elex
- Size 48KB
- Sample260808-klts6sck5v
- SHA256 99472dd93f0b71a77cbaba0e5960d827123a5d1a1773a56f507a5c5da2d0aaa0
- MD5 e7b03d1899c8593af14ab93843e40ea9
- SHA1 48dd79e65df1ead24fe2d462323faa4ba282d748
- SHA512 ea394033de9f790714b41f35d368ed1ac5c86dd7db4e462e62374b8650faf6f71221dd029bcc630ea45487c51a545943f7238d20074d348f81058c13c79a6971
- SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uXADHAAHD+ltIplC:i5nkFGMOtEvwDpjNbwQDfj+laLC
- TLSH T1212331786ED91572E3B7DA75C9F685C2B935B8233C129C0E41CA63454C33F16ECA2A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-08_e7b03d1899c8593af14ab93843e40ea9_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_e7b03d1899c8593af14ab93843e40ea9_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_e7b03d1899c8593af14ab93843e40ea9_cryptolocker_elex
- Size 48KB
- SHA256 99472dd93f0b71a77cbaba0e5960d827123a5d1a1773a56f507a5c5da2d0aaa0
- MD5 e7b03d1899c8593af14ab93843e40ea9
- SHA1 48dd79e65df1ead24fe2d462323faa4ba282d748
- SHA512 ea394033de9f790714b41f35d368ed1ac5c86dd7db4e462e62374b8650faf6f71221dd029bcc630ea45487c51a545943f7238d20074d348f81058c13c79a6971
- SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uXADHAAHD+ltIplC:i5nkFGMOtEvwDpjNbwQDfj+laLC
- TLSH T1212331786ED91572E3B7DA75C9F685C2B935B8233C129C0E41CA63454C33F16ECA2A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE