General
- Target 2026-08-08_e21cb8981e6761f81d2fb7d53fb04ae1_cryptolocker_elex
- Size 34KB
- Sample260809-ab6pwafh72
- SHA256 d8c0eff2d34c284a0e21b5da25a80e09be8c2694102e0dc6d46c2d1ea0f48637
- MD5 e21cb8981e6761f81d2fb7d53fb04ae1
- SHA1 e36f59e6327c61f94b945abbea716a7fda269584
- SHA512 fe14b08467a7dafe8a753f0fa15fc67f6329ed9a05c2c5efad7b3a37243c665f240be63300b0ff112b6803d539cb77fb363972fd82dfecf1e6f1ac259f47bddb
- SSDEEP 384:l0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26a4rIcVRYp055TOtOOtEvwDpjqIGR5o:lQz7yVEhs9+4uR1bytOOtEvwDpjWkrj
- TLSH T1DEF25E73BFC50916E0231B70A9BFC652A757BC8A3D31554EE64A33068E3374299A1C6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-08_e21cb8981e6761f81d2fb7d53fb04ae1_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_e21cb8981e6761f81d2fb7d53fb04ae1_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_e21cb8981e6761f81d2fb7d53fb04ae1_cryptolocker_elex
- Size 34KB
- SHA256 d8c0eff2d34c284a0e21b5da25a80e09be8c2694102e0dc6d46c2d1ea0f48637
- MD5 e21cb8981e6761f81d2fb7d53fb04ae1
- SHA1 e36f59e6327c61f94b945abbea716a7fda269584
- SHA512 fe14b08467a7dafe8a753f0fa15fc67f6329ed9a05c2c5efad7b3a37243c665f240be63300b0ff112b6803d539cb77fb363972fd82dfecf1e6f1ac259f47bddb
- SSDEEP 384:l0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26a4rIcVRYp055TOtOOtEvwDpjqIGR5o:lQz7yVEhs9+4uR1bytOOtEvwDpjWkrj
- TLSH T1DEF25E73BFC50916E0231B70A9BFC652A757BC8A3D31554EE64A33068E3374299A1C6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE