General

  • Target

    2024-01-29_0902defd077b53349f7ac6ae213a05b7_cryptolocker

  • Size

    38KB

  • MD5

    0902defd077b53349f7ac6ae213a05b7

  • SHA1

    20f3e89b0288e54efe397d5487a70fce90186030

  • SHA256

    0964228644e41d43c4c7dbd9d638bcbaebf868ebc89ebf840cdd2b18759d61d2

  • SHA512

    76d9bc63198370d8e588b88dab711cb9d3cef572a7ac320b591bbf5effd69ce9f3e7424b6819394d8cd2536ffd8004dd6580a4fa6cc09fe87be9b2e88123a15c

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOO7:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqhMx/

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-29_0902defd077b53349f7ac6ae213a05b7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections