2026-10-01_2c792901df762a63542fe3c36a5f6330_ctb-locker_elex

General

Target
2026-10-01_2c792901df762a63542fe3c36a5f6330_ctb-locker_elex
Size 32KB
Sample261002-v5cdcasapg
SHA256 5cc9c9e98431b93fccf64d210194f26c907849a0010f00fafa8dcffc4288aa49
MD5 2c792901df762a63542fe3c36a5f6330
SHA1 b53a77b40332e8fa0b2b840282f4b2d71a8fe3db
SHA512 14603254d675d8fcfed555fb2b7f5976eefce63fa5bcff5ce6cfdac2b3814ea16c1ef4d44c8eb4139054d898ceeaecf2520fea09a01f75c3430c910b8845e3bb
SSDEEP 384:fKe/H89setrFWXVWQl7yBilcsYBIKxqM5fBGSRwQjhloGNSvEB2j8uBtj8u5:ie09so85mQTmp5fBGS/jIGwvEB0F
TLSH
T148E228FA5DC02D61D35C133B4A3A563A0F1F8C7BBDB65A0E0226F5890B31B54D0AB52B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-01_2c792901df762a63542fe3c36a5f6330_ctb-locker_elex

File Explorer

2026-10-01_2c792901df762a63542fe3c36a5f6330_ctb-locker_elex

.exe 32KB

2026-10-01_2c792901df762a63542fe3c36a5f6330_ctb-locker_elex

IMPHASH 032237d350f6b8b702a00f2e14c713ce
SHA256 5cc9c9e98431b93fccf64d210194f26c907849a0010f00fafa8dcffc4288aa49
MD5 2c792901df762a63542fe3c36a5f6330
SHA1 b53a77b40332e8fa0b2b840282f4b2d71a8fe3db
SHA512 14603254d675d8fcfed555fb2b7f5976eefce63fa5bcff5ce6cfdac2b3814ea16c1ef4d44c8eb4139054d898ceeaecf2520fea09a01f75c3430c910b8845e3bb
SSDEEP 384:fKe/H89setrFWXVWQl7yBilcsYBIKxqM5fBGSRwQjhloGNSvEB2j8uBtj8u5:ie09so85mQTmp5fBGS/jIGwvEB0F
TLSH
T148E228FA5DC02D61D35C133B4A3A563A0F1F8C7BBDB65A0E0226F5890B31B54D0AB52B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7011

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

nddeapi

NDdeShareGetInfoA NDdeShareDelA NDdeShareAddA NDdeShareEnumA

wtsapi32

WTSVirtualChannelWrite WTSWaitSystemEvent WTSVirtualChannelClose WTSQuerySessionInformationA WTSSendMessageA WTSVirtualChannelPurgeInput WTSEnumerateServersA WTSFreeMemory WTSVirtualChannelQuery WTSUnRegisterSessionNotification WTSEnumerateProcessesA

kernel32

CreateNamedPipeA ReadConsoleA GetProcessHeap GetProcAddress GetGeoInfoA GetStringTypeA GetProcessId FormatMessageA GetConsoleTitleA SetFilePointer GetPrivateProfileStructW WaitForSingleObject GetFullPathNameA DeviceIoControl GetCurrentProcess FindResourceA SetCurrentDirectoryW GetDateFormatA HeapValidate ReadFile GetModuleHandleA GetTickCount GetBinaryTypeA

certcli

CACloseCertType CAEnumFirstCA CADeleteCA CAEnumNextCA

shlwapi

UrlIsOpaqueA UrlEscapeA UrlHashA PathCompactPathA UrlCreateFromPathA PathCombineA UrlCombineA PathCommonPrefixA UrlGetPartA UrlIsA UrlUnescapeA UrlGetLocationA UrlCompareA UrlIsNoHistoryW

advapi32

IsValidSecurityDescriptor RegDeleteKeyA InitializeSid RegOpenKeyExA IsValidSid RegEnumKeyA IsValidAcl RegSaveKeyA ControlService IsTextUnicode RegFlushKey CreateServiceA

msimg32

AlphaBlend GradientFill

modemui

drvCommConfigDialogA InvokeControlPanel drvSetDefaultCommConfigA

Name

.text

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-01_2c792901df762a63542fe3c36a5f6330_ctb-locker_elex

nddeapi

wtsapi32

kernel32

certcli

shlwapi

advapi32

msimg32

modemui

generic