General

  • Target

    2024-01-25_a1f1ae5f7602ba3b98ba97f1bb645ba2_cryptolocker

  • Size

    40KB

  • MD5

    a1f1ae5f7602ba3b98ba97f1bb645ba2

  • SHA1

    ac37e701ed1e9b4aee44e0352bea9bb85c29af0e

  • SHA256

    ec7ec46a438418b03015de6eaad81dde6248f4f497abe94534b8247d378a5936

  • SHA512

    75a42457c9d7c10325ff205be6a915e5fe3c390b885e2db19b8d9f602fa2872578a244281dab82b975711fe3fb76f50e10ce1fce52b9a285b2ffb0f0c97d96fc

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOo:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/W

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-25_a1f1ae5f7602ba3b98ba97f1bb645ba2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections