General
- Target 2026-08-08_e90fb3d76af155ac3e7958ee882bb0f6_cryptolocker_elex
- Size 34KB
- Sample260809-abpflaz1bt
- SHA256 1a53ca1403d22a029dba5feb61b1273fdcd2454766e6f80ce8716d25de8a40f5
- MD5 e90fb3d76af155ac3e7958ee882bb0f6
- SHA1 9e77bf23ba9f578a1a63d0aa3d9b982be92ded7a
- SHA512 e5060caf2f2a93817442cef7d5c9f1bdc4853db27a6441f4823d03eeed20f93e282ce2b7502028934b07adc4ea5319265061fc1ba9392d835ea8b1c0f1fcd188
- SSDEEP 384:l0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26a4rIcVRYp055TOtOOtEvwDpjqIGR5c:lQz7yVEhs9+4uR1bytOOtEvwDpjWkrf
- TLSH T162F25E73BFC50916E0231B70A9BFC652A757BC8A3D31554EE64A33068E3374299A1C6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-08_e90fb3d76af155ac3e7958ee882bb0f6_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-08_e90fb3d76af155ac3e7958ee882bb0f6_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-08_e90fb3d76af155ac3e7958ee882bb0f6_cryptolocker_elex
- Size 34KB
- SHA256 1a53ca1403d22a029dba5feb61b1273fdcd2454766e6f80ce8716d25de8a40f5
- MD5 e90fb3d76af155ac3e7958ee882bb0f6
- SHA1 9e77bf23ba9f578a1a63d0aa3d9b982be92ded7a
- SHA512 e5060caf2f2a93817442cef7d5c9f1bdc4853db27a6441f4823d03eeed20f93e282ce2b7502028934b07adc4ea5319265061fc1ba9392d835ea8b1c0f1fcd188
- SSDEEP 384:l0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26a4rIcVRYp055TOtOOtEvwDpjqIGR5c:lQz7yVEhs9+4uR1bytOOtEvwDpjWkrf
- TLSH T162F25E73BFC50916E0231B70A9BFC652A757BC8A3D31554EE64A33068E3374299A1C6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE