General

  • Target

    2024-01-28_4e44da467a4cef338cfaf3b3f5c7d302_cryptolocker

  • Size

    38KB

  • MD5

    4e44da467a4cef338cfaf3b3f5c7d302

  • SHA1

    3347481a17b128221959d3d6fb1226bcaffab442

  • SHA256

    5638ccd1e926d29e0764445be52d7d4919300e6e6d26887e4ae49b3b66617dde

  • SHA512

    d25ead0c367de88ce8ab6f44f0f7d21b50f70983c7624594d02d61d8a813f17ab011ab34a600c00b6f96a9e26944838caef556ba2e14897bb099be71b484fde3

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOs:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6C

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_4e44da467a4cef338cfaf3b3f5c7d302_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections