General

  • Target

    2024-01-18_cdba8d3a970828549cb7b6a95c87d3cf_cryptolocker

  • Size

    47KB

  • MD5

    cdba8d3a970828549cb7b6a95c87d3cf

  • SHA1

    41ca9ee07ca4f051ae3c04e9988fb6ca74249f47

  • SHA256

    815625ee63d3c684e70d31af81145c18345baad8b6a443f6dc1173e0fa10c856

  • SHA512

    24824d5fde6dab91a455ad3d1a17cf6b46d7f5ec32c689860d992f13a12c9407b8076fde62c25ed6fdf3f08b0ba3a852c1c2634b1000b325b65a849b0571d2f3

  • SSDEEP

    384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/74zpzq:XS5nQJ24LR1bytOOtEvwDpjNbP/0Gh

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-18_cdba8d3a970828549cb7b6a95c87d3cf_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections