2026-08-20_a66f1afdfea8eedb3f17743ccd2ddea0_cryptolocker_elex

General

Target
2026-08-20_a66f1afdfea8eedb3f17743ccd2ddea0_cryptolocker_elex
Size 56KB
Sample260820-hmwcaaca24
SHA256 bc7a3dd79fe409c3c05291bb587b0dd1b028fd4695edac720a08f4873d993689
MD5 a66f1afdfea8eedb3f17743ccd2ddea0
SHA1 59c6cbd1e687758a530400ddfd9cf8c06d0f62a9
SHA512 4571aa8ac5bda5e951f16c1115c904821528f46f37c011a50d31d50c1a80ca6de6ca172ba555b5721b160eb44417e44edabca6ac08d31de58524de936e1d3367
SSDEEP 768:br74zYcgT/Ekd0ryfjXaoP+NSBz1EXEl5EyKaIZsIunqpeNswmQak:br6YcA/X6GLadNSBBSm5zI/W19
TLSH
T1CD43F8397FD62A72D3778AB195F790C3BD3AB82239158C0D44CE53484933F56AD92A0E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-20_a66f1afdfea8eedb3f17743ccd2ddea0_cryptolocker_elex

File Explorer

2026-08-20_a66f1afdfea8eedb3f17743ccd2ddea0_cryptolocker_elex

.exe 56KB

2026-08-20_a66f1afdfea8eedb3f17743ccd2ddea0_cryptolocker_elex

SHA256 bc7a3dd79fe409c3c05291bb587b0dd1b028fd4695edac720a08f4873d993689
MD5 a66f1afdfea8eedb3f17743ccd2ddea0
SHA1 59c6cbd1e687758a530400ddfd9cf8c06d0f62a9
SHA512 4571aa8ac5bda5e951f16c1115c904821528f46f37c011a50d31d50c1a80ca6de6ca172ba555b5721b160eb44417e44edabca6ac08d31de58524de936e1d3367
SSDEEP 768:br74zYcgT/Ekd0ryfjXaoP+NSBz1EXEl5EyKaIZsIunqpeNswmQak:br6YcA/X6GLadNSBBSm5zI/W19
TLSH
T1CD43F8397FD62A72D3778AB195F790C3BD3AB82239158C0D44CE53484933F56AD92A0E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Detection of CryptoLocker Variants
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1024B

Virtual Size

536B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

8KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-20_a66f1afdfea8eedb3f17743ccd2ddea0_cryptolocker_elex

generic