General

  • Target

    2024-01-27_3eaf43660984acc58b70fe351b04ffb8_cryptolocker

  • Size

    64KB

  • MD5

    3eaf43660984acc58b70fe351b04ffb8

  • SHA1

    b70779c9cf71991d02032205223ef9f79135ed56

  • SHA256

    faa5209f878cc4ba343f3e3ec7da1608f243615d46121b420a230a5cee32b999

  • SHA512

    f1a7d4dc16013be057c69fb144b8ba62208913bc40ec109f2f71e0d981e15aa60d67069bca264c7bde7ea0857c7add43ce1e983bc531b0b35728439ae469114e

  • SSDEEP

    384:x0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26a3WDjRYp055TOtOOtEvwDpjqIGR5d:xQz7yVEhs9+44R1bytOOtEvwDpjW

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-27_3eaf43660984acc58b70fe351b04ffb8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections