General

  • Target

    2024-01-28_6dcfad8eb3f8ceb92cf3de08202f8dd1_cryptolocker

  • Size

    100KB

  • MD5

    6dcfad8eb3f8ceb92cf3de08202f8dd1

  • SHA1

    9e78a207ae7dc23dc7cbad5dd345a870ed0b9c73

  • SHA256

    c8681a697fdcb4ce68b9f2b75e46fb7dcd6d809d70c53d5d76aa34d004e99349

  • SHA512

    482d7f77342955289d0960d608175cfba10ac28b917edaad758d65d44d2c6a4fbef5a16439dc4329835455f389fdc6d457faa2b15517d30b8924ee2d561f98cd

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2ek:xj+VGMOtEvwDpjubwQEIiVmkxv/V

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_6dcfad8eb3f8ceb92cf3de08202f8dd1_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections