General
- Target 2026-08-21_ab821d56f81fb56059f9a1daa9717695_cryptolocker_elex
- Size 4.6MB
- Sample260822-j8wevasfkf
- SHA256 283c96a2def901173677c903e2354b88806af45464fdd2d2001ebf61f0dc4411
- MD5 ab821d56f81fb56059f9a1daa9717695
- SHA1 24957743c5bc1284928141917660edb6540ba4e5
- SHA512 50482c2dd46a121c25180635c3c55150df79a5beabb3e03b66c7f483e4092c0bd3b165673a3f5ae17fc80d576666042a39246087f3e8ea49a0d3236c221730cb
- SSDEEP 98304:uR/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTd:w/ZFIjBzF/ZFIjBzPEUusd
- TLSH T1A9263C5BA8E650A4C8FAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-21_ab821d56f81fb56059f9a1daa9717695_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-21_ab821d56f81fb56059f9a1daa9717695_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-21_ab821d56f81fb56059f9a1daa9717695_cryptolocker_elex
- Size 4.6MB
- SHA256 283c96a2def901173677c903e2354b88806af45464fdd2d2001ebf61f0dc4411
- MD5 ab821d56f81fb56059f9a1daa9717695
- SHA1 24957743c5bc1284928141917660edb6540ba4e5
- SHA512 50482c2dd46a121c25180635c3c55150df79a5beabb3e03b66c7f483e4092c0bd3b165673a3f5ae17fc80d576666042a39246087f3e8ea49a0d3236c221730cb
- SSDEEP 98304:uR/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTd:w/ZFIjBzF/ZFIjBzPEUusd
- TLSH T1A9263C5BA8E650A4C8FAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE