General
- Target 2026-08-22_6d349911b7f8fbb7f106eb768db9e11e_cryptolocker_elex
- Size 39KB
- Sample260823-hpr3mser3s
- SHA256 0562307415739304027a5ad75571b1788f48adce9124d6c2e7b853a0bd8f4ccc
- MD5 6d349911b7f8fbb7f106eb768db9e11e
- SHA1 05a25382bc1c347f436c89597ffbd55d70306454
- SHA512 f46586e384cc9887209d97eef1aaa950e7202fc7f9ea35bda4044b0e4167748226c69c2e60e09ce0beb85433f1a4e80875504f6fd4994985401db9c49d62acb7
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWfcOj1VL:lj+VGMOtEvwDpjcRjT
- TLSH T150030932AFC51932E2379B7199FBC282BA67BC563D31550D918A33054D33B42ADA1E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-22_6d349911b7f8fbb7f106eb768db9e11e_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-22_6d349911b7f8fbb7f106eb768db9e11e_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-22_6d349911b7f8fbb7f106eb768db9e11e_cryptolocker_elex
- Size 39KB
- SHA256 0562307415739304027a5ad75571b1788f48adce9124d6c2e7b853a0bd8f4ccc
- MD5 6d349911b7f8fbb7f106eb768db9e11e
- SHA1 05a25382bc1c347f436c89597ffbd55d70306454
- SHA512 f46586e384cc9887209d97eef1aaa950e7202fc7f9ea35bda4044b0e4167748226c69c2e60e09ce0beb85433f1a4e80875504f6fd4994985401db9c49d62acb7
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWfcOj1VL:lj+VGMOtEvwDpjcRjT
- TLSH T150030932AFC51932E2379B7199FBC282BA67BC563D31550D918A33054D33B42ADA1E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE