2026-08-12_ba13f49d25cd5152e6f160964fa0606d_cryptowall_elex

General

Target
2026-08-12_ba13f49d25cd5152e6f160964fa0606d_cryptowall_elex
Size 116KB
Sample260813-ak2saaff83
SHA256 8275e1101052e376bf161c68813f732e4f54460697685962da86f97f5573230d
MD5 ba13f49d25cd5152e6f160964fa0606d
SHA1 ee71e4780ecc7310fb1c587e627753ac1637fdec
SHA512 66d32b594fb2b7f4531054ffd6fabaaa073ba57a005b378ebfd0f64ce28729c2251dfc28ca3c43751cc4f95de6f96585d6900801068cc93707361caae056b098
SSDEEP 3072:XGWXPLlyXQ63P0TSPkvmnfEHj3SfkUo7xh/awwDY:XGQLIA63P0TEzfEHj3SMLPawwDY
TLSH
T1AEC3FA10D0A0C77AE4A340F9C7EA0DBDB8354D60334615C7A6C23E7D6B52EE56B31BA9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detects ransomware indicator 1 IoCs

resource	yara_rule
sample	SUSP_RANSOMWARE_Indicator_Jul20

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-12_ba13f49d25cd5152e6f160964fa0606d_cryptowall_elex

SHA256 8275e1101052e376bf161c68813f732e4f54460697685962da86f97f5573230d
MD5 ba13f49d25cd5152e6f160964fa0606d
SHA1 ee71e4780ecc7310fb1c587e627753ac1637fdec
SHA512 66d32b594fb2b7f4531054ffd6fabaaa073ba57a005b378ebfd0f64ce28729c2251dfc28ca3c43751cc4f95de6f96585d6900801068cc93707361caae056b098
SSDEEP 3072:XGWXPLlyXQ63P0TSPkvmnfEHj3SfkUo7xh/awwDY:XGQLIA63P0TEzfEHj3SMLPawwDY
TLSH
T1AEC3FA10D0A0C77AE4A340F9C7EA0DBDB8354D60334615C7A6C23E7D6B52EE56B31BA9
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

1

Major OS version

5

Entry point

82784

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths