General

  • Target

    2024-01-26_1291c44fff62086288032398f20e5c7c_cryptolocker

  • Size

    84KB

  • MD5

    1291c44fff62086288032398f20e5c7c

  • SHA1

    ff09fe30d123638942fb840399b99926fb0bcf3b

  • SHA256

    6f331b3f9dee7ba871b82f40870f67fde913bd33475a50e74aa3dc2dc6ef25e6

  • SHA512

    f62d05e7e72d1ce75bcdc6ec59b0260b23e3e9223de432ec60df20e03d263806459e52fb249f1d4c533cf4f11beac26e0823a7ebc81ef494bd137d2bd6c9742f

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAk:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8Ak

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-26_1291c44fff62086288032398f20e5c7c_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections