General
- Target 2026-10-08_07a488c2a867d06cd7b402d74f1a8cfc_cryptolocker_elex
- Size 4.6MB
- Sample261009-1pcxtsee83
- SHA256 6c3c6a26d6ef40358a69160573e10c4c8ce8152a6fb720928e1ba200dc4e6dd2
- MD5 07a488c2a867d06cd7b402d74f1a8cfc
- SHA1 b70f3ee16051bde022d01aae8bc3558fd11fcf79
- SHA512 30003cf480140fcfcc179cef7fe30701b607a866f70025f448c20be06dbb3daa5a8a8ef4c8fa8f005757442557d8f80aa02aa30a96dc5adbacefd7cdd2d1e838
- SSDEEP 98304:uR/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTP:w/ZFIjBzF/ZFIjBzPEUusP
- TLSH T13C263C5BA8E650A4C8FAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
2026-10-08_07a488c2a867d06cd7b402d74f1a8cfc_cryptolocker_elex.exe
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-10-08_07a488c2a867d06cd7b402d74f1a8cfc_cryptolocker_elex.exe
Resource
win11ltsc2024-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-10-08_07a488c2a867d06cd7b402d74f1a8cfc_cryptolocker_elex
- Size 4.6MB
- SHA256 6c3c6a26d6ef40358a69160573e10c4c8ce8152a6fb720928e1ba200dc4e6dd2
- MD5 07a488c2a867d06cd7b402d74f1a8cfc
- SHA1 b70f3ee16051bde022d01aae8bc3558fd11fcf79
- SHA512 30003cf480140fcfcc179cef7fe30701b607a866f70025f448c20be06dbb3daa5a8a8ef4c8fa8f005757442557d8f80aa02aa30a96dc5adbacefd7cdd2d1e838
- SSDEEP 98304:uR/ZFIjBzldUfs/ZFIjBz7jSZD1tU7ymTP:w/ZFIjBzF/ZFIjBzPEUusP
- TLSH T13C263C5BA8E650A4C8FAD8348BE9E223FF633459473577E31BA091601F25BD0F8B9711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detection of CryptoLocker Variants
-
Detects executables built or packed with MPress PE compressor
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE