2026-08-18_e499b072315e7052b91e6d374e9861e1_cryptolocker_elex

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-18_e499b072315e7052b91e6d374e9861e1_cryptolocker_elex
Size 64KB
Sample260818-pyex1abl4w
SHA256 467c0c430ee22f08d0cf805b177fd20ea90daeaf36d93c7cddcc90b3811fe57f
MD5 e499b072315e7052b91e6d374e9861e1
SHA1 8214b9b37ad0e63083790be87f1846086897dcdc
SHA512 02375493ebee203bf9303a4e68c1562591b74684c3473651df43b08e0583ae81f86ecc8d1986b23edb12acc2833333cfc3abae84f11e463350c70a911bd72ecb
SSDEEP 768:bG74zYcgT/Ekd0ryfjSb8qD+7g3Zectbr5+IunYw16zle:bG6YcA/X6Gw8qDxRWP6Je
TLSH
T10453F73D7BC61672D3778AB195F791C3BA36B4323A128C4D44CA03480933F62EDA2A4D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-18_e499b072315e7052b91e6d374e9861e1_cryptolocker_elex

File Explorer

2026-08-18_e499b072315e7052b91e6d374e9861e1_cryptolocker_elex

.exe 64KB

2026-08-18_e499b072315e7052b91e6d374e9861e1_cryptolocker_elex

SHA256 467c0c430ee22f08d0cf805b177fd20ea90daeaf36d93c7cddcc90b3811fe57f
MD5 e499b072315e7052b91e6d374e9861e1
SHA1 8214b9b37ad0e63083790be87f1846086897dcdc
SHA512 02375493ebee203bf9303a4e68c1562591b74684c3473651df43b08e0583ae81f86ecc8d1986b23edb12acc2833333cfc3abae84f11e463350c70a911bd72ecb
SSDEEP 768:bG74zYcgT/Ekd0ryfjSb8qD+7g3Zectbr5+IunYw16zle:bG6YcA/X6Gw8qDxRWP6Je
TLSH
T10453F73D7BC61672D3778AB195F791C3BA36B4323A128C4D44CA03480933F62EDA2A4D
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Detection of CryptoLocker Variants
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

536B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1024B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-18_e499b072315e7052b91e6d374e9861e1_cryptolocker_elex

generic