General
- Target 2026-08-21_bc7feda188e81caf625537e36e7b5985_cryptolocker_elex
- Size 4.5MB
- Sample260822-hsf5jsfm7v
- SHA256 724cf1bf288b934f52c73568d3671679ff071c76d801a4608fbf50690204bcf0
- MD5 bc7feda188e81caf625537e36e7b5985
- SHA1 0e3200f0b29701f7981ab729790939217a99023c
- SHA512 6c86241d3c0bbd26ffb1e33fa2089d97dd968e9bf5586575d9b4fb9138a7d3cbea39b8371df3e7697031a17fa9b14dd52d5b3f8c7e0615f8b4ba0effffda7e01
- SSDEEP 98304:g/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTc:g/ZFIjBzF/ZFIjBzPEUusc
- TLSH T1C0263C5FA8E650A4C8EAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-21_bc7feda188e81caf625537e36e7b5985_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_bc7feda188e81caf625537e36e7b5985_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_bc7feda188e81caf625537e36e7b5985_cryptolocker_elex
- Size 4.5MB
- SHA256 724cf1bf288b934f52c73568d3671679ff071c76d801a4608fbf50690204bcf0
- MD5 bc7feda188e81caf625537e36e7b5985
- SHA1 0e3200f0b29701f7981ab729790939217a99023c
- SHA512 6c86241d3c0bbd26ffb1e33fa2089d97dd968e9bf5586575d9b4fb9138a7d3cbea39b8371df3e7697031a17fa9b14dd52d5b3f8c7e0615f8b4ba0effffda7e01
- SSDEEP 98304:g/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTc:g/ZFIjBzF/ZFIjBzPEUusc
- TLSH T1C0263C5FA8E650A4C8EAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE