2026-08-22_96bd438a8770fa6ad8a503ed743ece5b_cryptolocker_elex

General

Target
2026-08-22_96bd438a8770fa6ad8a503ed743ece5b_cryptolocker_elex
Size 47KB
Sample260823-e43adasfph
SHA256 8babeb96e3993be71bce7447131746dabcdb31cf56a91ca1912c49d5c5aae49a
MD5 96bd438a8770fa6ad8a503ed743ece5b
SHA1 44cb49e3c1f0a468296a7a21922ac41a46d8d94e
SHA512 fcab752f69218c419bcc76da5e2458f8282f1c64fd5f30629d233da442f68d42c7750aefa53b27a9e09c7fdabd52c1e0c96fafa66417c10b66e752b121345fd2
SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uXADHAAHD+ltx:i5nkFGMOtEvwDpjNbwQDfj+lL
TLSH
T11F2341786ED91572D3B7DAB5C5F685C2B935B8233C12980E41CA63454C33F17ECA2A1E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-22_96bd438a8770fa6ad8a503ed743ece5b_cryptolocker_elex

IMPHASH e021c9fc2c12265365fad587d43783fe
SHA256 8babeb96e3993be71bce7447131746dabcdb31cf56a91ca1912c49d5c5aae49a
MD5 96bd438a8770fa6ad8a503ed743ece5b
SHA1 44cb49e3c1f0a468296a7a21922ac41a46d8d94e
SHA512 fcab752f69218c419bcc76da5e2458f8282f1c64fd5f30629d233da442f68d42c7750aefa53b27a9e09c7fdabd52c1e0c96fafa66417c10b66e752b121345fd2
SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uXADHAAHD+ltx:i5nkFGMOtEvwDpjNbwQDfj+lL
TLSH
T11F2341786ED91572D3B7DAB5C5F685C2B935B8233C12980E41CA63454C33F17ECA2A1E
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

5

Entry point

41183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths