General
- Target 2026-08-31_d8aa278bbf3bc0d3d6e47f415886b320_cryptolocker_elex
- Size 48KB
- Sample260831-rbbm6stbkb
- SHA256 051512c6c73124f7af5e1fe9ff463553cf9c5698eb38fc064d2689480b950be0
- MD5 d8aa278bbf3bc0d3d6e47f415886b320
- SHA1 ca5901108ca61c45ea5e9912e7129f2802472e50
- SHA512 563c225e1ca8e0427b9d33e1760198a7a3d981c076a43bf42d6b58180ce055e5b9fc0fa6f4816d5f196e987d03532231b9639fd80282de813db3c82c8046c25b
- SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uXADHAAHD+ltO/:i5nkFGMOtEvwDpjNbwQDfj+l4
- TLSH T16C2331786ED91572D3B7CAB5C9F685C2B935B8233C12980E41CA63454C33F17EDA2A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-08-31_d8aa278bbf3bc0d3d6e47f415886b320_cryptolocker_elex.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-31_d8aa278bbf3bc0d3d6e47f415886b320_cryptolocker_elex.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-31_d8aa278bbf3bc0d3d6e47f415886b320_cryptolocker_elex
- Size 48KB
- SHA256 051512c6c73124f7af5e1fe9ff463553cf9c5698eb38fc064d2689480b950be0
- MD5 d8aa278bbf3bc0d3d6e47f415886b320
- SHA1 ca5901108ca61c45ea5e9912e7129f2802472e50
- SHA512 563c225e1ca8e0427b9d33e1760198a7a3d981c076a43bf42d6b58180ce055e5b9fc0fa6f4816d5f196e987d03532231b9639fd80282de813db3c82c8046c25b
- SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uXADHAAHD+ltO/:i5nkFGMOtEvwDpjNbwQDfj+l4
- TLSH T16C2331786ED91572D3B7CAB5C9F685C2B935B8233C12980E41CA63454C33F17EDA2A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detection of Cryptolocker Samples
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE