General

  • Target

    2024-01-29_12a509fbb0e07ef9cbb376b0f076346a_cryptolocker

  • Size

    46KB

  • MD5

    12a509fbb0e07ef9cbb376b0f076346a

  • SHA1

    b9d37133aa0b2374e825c7f2000b58c715319540

  • SHA256

    1298267697cdf285dd995495d7f0e937285ef123e24944fd1af1c99669bdb178

  • SHA512

    fcc647b7439bd510c5526f5c676d03690d2434d8f420a26a710ad40a3b7b720eb0604c33a4a599b1a38244fcadb4bc76a378adcb09e79a0a3e6b68443d9b984d

  • SSDEEP

    384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/7IM4m:XS5nQJ24LR1bytOOtEvwDpjNbP/MMF

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-29_12a509fbb0e07ef9cbb376b0f076346a_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections