General
- Target 2026-08-10_97f3f2ab44649ec96327ed8bf71c64be_cryptowall_elex
- Size 111KB
- Sample260810-ex6n8avycw
- SHA256 e5075e31fcc7c2abda6fbf1625ca12867b39c4c66bf70fb1d199e56da461eb94
- MD5 97f3f2ab44649ec96327ed8bf71c64be
- SHA1 2e8a65eea080e1059abbc4770935a541df341403
- SHA512 b5b9a0ee661329532572eaefb6771b70e4400ca506ac715ecf20fe00a66fc239dc04ec14dfb146975dd6f4fd88ba50de7694919852747581c0c61289638e8258
- SSDEEP 3072:XBZk/WaepTR2WTPCkCwENzCKtz3SfkUo7xh/awwDYD:XB1pTT2kCSKtz3SMLPawwDY
- TLSH T127B3F910D0A0C7BAE4A240F9C7E90EBDB8354D60335606C7A3C23E797752DE56B35BA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-08-10_97f3f2ab44649ec96327ed8bf71c64be_cryptowall_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-10_97f3f2ab44649ec96327ed8bf71c64be_cryptowall_elex.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-10_97f3f2ab44649ec96327ed8bf71c64be_cryptowall_elex
- Size 111KB
- SHA256 e5075e31fcc7c2abda6fbf1625ca12867b39c4c66bf70fb1d199e56da461eb94
- MD5 97f3f2ab44649ec96327ed8bf71c64be
- SHA1 2e8a65eea080e1059abbc4770935a541df341403
- SHA512 b5b9a0ee661329532572eaefb6771b70e4400ca506ac715ecf20fe00a66fc239dc04ec14dfb146975dd6f4fd88ba50de7694919852747581c0c61289638e8258
- SSDEEP 3072:XBZk/WaepTR2WTPCkCwENzCKtz3SfkUo7xh/awwDYD:XB1pTT2kCSKtz3SMLPawwDY
- TLSH T127B3F910D0A0C7BAE4A240F9C7E90EBDB8354D60335606C7A3C23E797752DE56B35BA9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects ransomware indicator
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application