General
- Target 2026-08-09_f07cdfe5086e6b6e95232be894899494_cryptolocker_elex
- Size 3.4MB
- Sample260809-x3hhpacm4w
- SHA256 91c09c4f917eb3463a585b5a4e8ea28ac5435cb61953853aa293bd9074fc13c7
- MD5 f07cdfe5086e6b6e95232be894899494
- SHA1 016bc138e4bf0494c733c3d06a550214e5d19bd2
- SHA512 0475f7945c4bc45e23d3c698cd55b94d3142b73d0fe99e827286f153e55edfb2216db686ca6c0c2f09b96fd6a21458ec8ac054416e5e278eaa52908d6cdc23e8
- SSDEEP 49152:uR/ZFIjBzT1CIdSPHf0f/ZFIjBzGAyGs+Q7uOZzNvBLEdfW:uR/ZFIjBzldUfs/ZFIjBz7jSZD7
- TLSH T14EF55C6F68A611A4DCFAC8305BE9F222FF6334594739A7F31AA091201F25BD1F875712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-09_f07cdfe5086e6b6e95232be894899494_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-09_f07cdfe5086e6b6e95232be894899494_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-09_f07cdfe5086e6b6e95232be894899494_cryptolocker_elex
- Size 3.4MB
- SHA256 91c09c4f917eb3463a585b5a4e8ea28ac5435cb61953853aa293bd9074fc13c7
- MD5 f07cdfe5086e6b6e95232be894899494
- SHA1 016bc138e4bf0494c733c3d06a550214e5d19bd2
- SHA512 0475f7945c4bc45e23d3c698cd55b94d3142b73d0fe99e827286f153e55edfb2216db686ca6c0c2f09b96fd6a21458ec8ac054416e5e278eaa52908d6cdc23e8
- SSDEEP 49152:uR/ZFIjBzT1CIdSPHf0f/ZFIjBzGAyGs+Q7uOZzNvBLEdfW:uR/ZFIjBzldUfs/ZFIjBz7jSZD7
- TLSH T14EF55C6F68A611A4DCFAC8305BE9F222FF6334594739A7F31AA091201F25BD1F875712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE