General
- Target 2026-08-23_9b927d2d72352bfbf8f98a2a2f337362_cryptolocker_elex
- Size 39KB
- Sample260824-emrsbasfrh
- SHA256 ff821c62bef1051ac444f0fd0e5a5b1ea1d6d2b155352acffd4c3304b0615ce0
- MD5 9b927d2d72352bfbf8f98a2a2f337362
- SHA1 7790724df79a1c105dba19ede836a29ac902c892
- SHA512 38d0e118e5c1fbd9dd2b065cea83972dc4a5f81e4574854782d831143ab40943f18ff408c1735e343097117f3d6cbe6a39e16727558aa465bd16fc3dfd6fba10
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWfcOj1E:lj+VGMOtEvwDpjcRj6
- TLSH T180030932AFC51926E2379B7199FBC282BB67BC563C31550D918A33054D33B42ADA1E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-23_9b927d2d72352bfbf8f98a2a2f337362_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-23_9b927d2d72352bfbf8f98a2a2f337362_cryptolocker_elex.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-23_9b927d2d72352bfbf8f98a2a2f337362_cryptolocker_elex
- Size 39KB
- SHA256 ff821c62bef1051ac444f0fd0e5a5b1ea1d6d2b155352acffd4c3304b0615ce0
- MD5 9b927d2d72352bfbf8f98a2a2f337362
- SHA1 7790724df79a1c105dba19ede836a29ac902c892
- SHA512 38d0e118e5c1fbd9dd2b065cea83972dc4a5f81e4574854782d831143ab40943f18ff408c1735e343097117f3d6cbe6a39e16727558aa465bd16fc3dfd6fba10
- SSDEEP 768:lQz7yVEhs9+4uR1bytOOtEvwDpjWfcOj1E:lj+VGMOtEvwDpjcRj6
- TLSH T180030932AFC51926E2379B7199FBC282BB67BC563C31550D918A33054D33B42ADA1E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE