General
- Target 2026-08-20_4a60b34ef367ad7c9df7c53242606a47_cryptolocker_elex
- Size 3.4MB
- Sample260820-1vezdaztcs
- SHA256 39fffdebfbfd06666beb020ca41dd108f76d832d586faaf054a878bef541f2fa
- MD5 4a60b34ef367ad7c9df7c53242606a47
- SHA1 b2e8a8f7d6b41447b38e1c488b1595e97c353ccf
- SHA512 7785420c2df45d8b15a96c6f5d8578abacdd760296441339924fa55a5bf3ac69674d7329eb3d4373930df32ea88406a52a3b06ed6628a3d1a121e2dec048c853
- SSDEEP 49152:uR/ZFIjBzT1CIdSPHf0f/ZFIjBzGAyGs+Q7uOZzNvBLEdfn:uR/ZFIjBzldUfs/ZFIjBz7jSZDS
- TLSH T18AF55C6F68A611A4DCFAC8305BE9F222FF6334594739A7F31AA091201F25BD1F875712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-20_4a60b34ef367ad7c9df7c53242606a47_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-20_4a60b34ef367ad7c9df7c53242606a47_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-20_4a60b34ef367ad7c9df7c53242606a47_cryptolocker_elex
- Size 3.4MB
- SHA256 39fffdebfbfd06666beb020ca41dd108f76d832d586faaf054a878bef541f2fa
- MD5 4a60b34ef367ad7c9df7c53242606a47
- SHA1 b2e8a8f7d6b41447b38e1c488b1595e97c353ccf
- SHA512 7785420c2df45d8b15a96c6f5d8578abacdd760296441339924fa55a5bf3ac69674d7329eb3d4373930df32ea88406a52a3b06ed6628a3d1a121e2dec048c853
- SSDEEP 49152:uR/ZFIjBzT1CIdSPHf0f/ZFIjBzGAyGs+Q7uOZzNvBLEdfn:uR/ZFIjBzldUfs/ZFIjBz7jSZDS
- TLSH T18AF55C6F68A611A4DCFAC8305BE9F222FF6334594739A7F31AA091201F25BD1F875712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE