General

  • Target

    2024-01-27_a0857035e60331642260013f519d23fa_cryptolocker

  • Size

    38KB

  • MD5

    a0857035e60331642260013f519d23fa

  • SHA1

    cf53f811c9830b1481878387afb6650f50f27de6

  • SHA256

    1a8b4bb8cb6a2c92e8c65f0ff609d33877f029a1d7659aefc051d0681851d776

  • SHA512

    ad75387b9dcae4a96dfbc2b9357b3d59545ef1ee064151d5a5dee778e4f838a83dddf81fbaca2ef68a73ab9a089115fc0a9120129e0b6f79840d94bc65cb87d8

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOt:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6X

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-27_a0857035e60331642260013f519d23fa_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections