General
- Target 2026-08-13_04802876e34774ef9e017ccb79963b53_cryptolocker_elex
- Size 3.4MB
- Sample260813-mwtx2aac45
- SHA256 60afeb9d94145ea4fe35c779388f3f4914cb00248095b833870597632093f91c
- MD5 04802876e34774ef9e017ccb79963b53
- SHA1 f1fd0efb418a1087442c15da50e03e52452862ff
- SHA512 a6fa549b18f0b4abab64fc8c07c8d588c203b4406bb4b01a7844f7c493851d3c9c705567fdd62877cf2ed734ee18357d64b5c3208d675f0d9cd37081b5e9f45b
- SSDEEP 49152:uR/ZFIjBzT1CIdSPHf0f/ZFIjBzGAyGs+Q7uOZzNvBLEdfq:uR/ZFIjBzldUfs/ZFIjBz7jSZDP
- TLSH T19FF55C6F68A611A4DCFAC8305BE9F222FF6334594739A7F31AA091201F25BD1F875712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-13_04802876e34774ef9e017ccb79963b53_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-13_04802876e34774ef9e017ccb79963b53_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-13_04802876e34774ef9e017ccb79963b53_cryptolocker_elex
- Size 3.4MB
- SHA256 60afeb9d94145ea4fe35c779388f3f4914cb00248095b833870597632093f91c
- MD5 04802876e34774ef9e017ccb79963b53
- SHA1 f1fd0efb418a1087442c15da50e03e52452862ff
- SHA512 a6fa549b18f0b4abab64fc8c07c8d588c203b4406bb4b01a7844f7c493851d3c9c705567fdd62877cf2ed734ee18357d64b5c3208d675f0d9cd37081b5e9f45b
- SSDEEP 49152:uR/ZFIjBzT1CIdSPHf0f/ZFIjBzGAyGs+Q7uOZzNvBLEdfq:uR/ZFIjBzldUfs/ZFIjBz7jSZDP
- TLSH T19FF55C6F68A611A4DCFAC8305BE9F222FF6334594739A7F31AA091201F25BD1F875712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE