General

  • Target

    2024-01-26_d12e7a752a702562b1ed44a930c342be_cryptolocker

  • Size

    100KB

  • MD5

    d12e7a752a702562b1ed44a930c342be

  • SHA1

    15633044fef6a0aebd9d3f230c9f590fb9cca350

  • SHA256

    558be9786c5846010a05e7e36ccb4410d7c33562474f79a26cc7b17fe6cbb9f7

  • SHA512

    9848d5d22bba6bfe4baab2b2c08d2b002cbe4cbc6594467b6bb7b7f42cb3a275d5460e0c9e93904502131349fbb936d3d7cb3ddb2c0483ee718cc0141004dcc3

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2q:xj+VGMOtEvwDpjubwQEIiVmkxv/2

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-26_d12e7a752a702562b1ed44a930c342be_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections