General
- Target 2026-08-21_62f904a41c509f202c03271ffa6ccfed_cryptolocker_elex
- Size 3.4MB
- Sample260821-jksdaaad28
- SHA256 c101866b4d0ac522b7eb3fb5ef070ee40ea14893f89fed8f7ac4eadc14659890
- MD5 62f904a41c509f202c03271ffa6ccfed
- SHA1 ff8f42f0e35e8b1219da33d7a2dfd348b176e6a7
- SHA512 1d11e32ba229751bc1ada99a10c88d39df60a7e9f1108a2b017451402af8deee47390b5580f22bcfd64573a4a5943af536c21dfbe07c0c2d97178b1b68791859
- SSDEEP 49152:uR/ZFIjBzT1CIdSPHf0f/ZFIjBzGAyGs+Q7uOZzNvBLEdfj:uR/ZFIjBzldUfs/ZFIjBz7jSZDu
- TLSH T1EDF55C6F68A611A4DCFAC8305BE9F222FF6334594739A7F31AA091201F25BD1F875712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-21_62f904a41c509f202c03271ffa6ccfed_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_62f904a41c509f202c03271ffa6ccfed_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_62f904a41c509f202c03271ffa6ccfed_cryptolocker_elex
- Size 3.4MB
- SHA256 c101866b4d0ac522b7eb3fb5ef070ee40ea14893f89fed8f7ac4eadc14659890
- MD5 62f904a41c509f202c03271ffa6ccfed
- SHA1 ff8f42f0e35e8b1219da33d7a2dfd348b176e6a7
- SHA512 1d11e32ba229751bc1ada99a10c88d39df60a7e9f1108a2b017451402af8deee47390b5580f22bcfd64573a4a5943af536c21dfbe07c0c2d97178b1b68791859
- SSDEEP 49152:uR/ZFIjBzT1CIdSPHf0f/ZFIjBzGAyGs+Q7uOZzNvBLEdfj:uR/ZFIjBzldUfs/ZFIjBz7jSZDu
- TLSH T1EDF55C6F68A611A4DCFAC8305BE9F222FF6334594739A7F31AA091201F25BD1F875712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE