General

  • Target

    2024-01-25_30babb9cf75a4f55e60e5b3d74ee40cb_cryptolocker

  • Size

    93KB

  • MD5

    30babb9cf75a4f55e60e5b3d74ee40cb

  • SHA1

    6b33e355befd37b6149074e3c3683f1faf126ad4

  • SHA256

    5990a368c6435d94db1947453117665b7509aea297cce467fbd76ab5c931e08e

  • SHA512

    5d0284dbee39ec4fd337f0f1a5083dfbe6375c2f7a45cf5e51e45f39c38441e5ee0f7a0565cf22208151545af2abfe292fbaa656ffdcfea586ab5a93c3429e67

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvj0n:xj+VGMOtEvwDpjubwQEI8UtzNcO8QAKn

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-25_30babb9cf75a4f55e60e5b3d74ee40cb_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections