General

  • Target

    2024-01-25_488ffe057ef38a24aa631fb10a199b0a_cryptolocker

  • Size

    99KB

  • MD5

    488ffe057ef38a24aa631fb10a199b0a

  • SHA1

    07117e495397319f3ce82bdeea70e2f6bc637f94

  • SHA256

    614617b1a500c013e4534ca8cd49ad8ee5d8e71b867907654417193ada0f8b77

  • SHA512

    06e947612f3b6eecec1ecf198f1ef2eac21c77aede0c02451d3f0a544b00d79f5976f6839c1f1a902e2ce0dcf366ab86ee8f3400f04c3b7f3bb8b7166e2d190c

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2K:xj+VGMOtEvwDpjubwQEIiVmkxv/G

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-25_488ffe057ef38a24aa631fb10a199b0a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections