General
- Target 2026-08-16_e7f390ff461e7e82bebc7cdbf9c70182_cryptolocker_elex
- Size 3.4MB
- Sample260816-b6fbvabk4w
- SHA256 ba179a4a2d4b27d21ef95231ee5946c8b6c59ea2705ab3832f18ef16d5a4ad97
- MD5 e7f390ff461e7e82bebc7cdbf9c70182
- SHA1 3a2466c91ad1e9b0bafb8841e5e60b0ccb8c6166
- SHA512 dbbab60a25400cf362635b8dcf157423d35da89c4022c604cdb66bb54f7274cb37fb271dd326946110f9478027d30d86a55e4edd0a3e4dd7eb8d237382ce74de
- SSDEEP 49152:uR/ZFIjBzT1CIdSPHf0f/ZFIjBzGAyGs+Q7uOZzNvBLEdfO:uR/ZFIjBzldUfs/ZFIjBz7jSZDr
- TLSH T147F55C6F68A611A4DCFAC8305BE9F222FF6334594739A7F31AA091201F25BD1F875712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-16_e7f390ff461e7e82bebc7cdbf9c70182_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_e7f390ff461e7e82bebc7cdbf9c70182_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_e7f390ff461e7e82bebc7cdbf9c70182_cryptolocker_elex
- Size 3.4MB
- SHA256 ba179a4a2d4b27d21ef95231ee5946c8b6c59ea2705ab3832f18ef16d5a4ad97
- MD5 e7f390ff461e7e82bebc7cdbf9c70182
- SHA1 3a2466c91ad1e9b0bafb8841e5e60b0ccb8c6166
- SHA512 dbbab60a25400cf362635b8dcf157423d35da89c4022c604cdb66bb54f7274cb37fb271dd326946110f9478027d30d86a55e4edd0a3e4dd7eb8d237382ce74de
- SSDEEP 49152:uR/ZFIjBzT1CIdSPHf0f/ZFIjBzGAyGs+Q7uOZzNvBLEdfO:uR/ZFIjBzldUfs/ZFIjBz7jSZDr
- TLSH T147F55C6F68A611A4DCFAC8305BE9F222FF6334594739A7F31AA091201F25BD1F875712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE