General

  • Target

    2024-01-29_4eba46d0fe9d7ef412da4e1855f61933_cryptolocker

  • Size

    56KB

  • MD5

    4eba46d0fe9d7ef412da4e1855f61933

  • SHA1

    7d7135fba134fab77706c983e503c96b737d0631

  • SHA256

    029eb4a15c4df0cfa311e97e0fd83e5d9d4ebf02fa70becc6a5b0c3f669fd900

  • SHA512

    bdaa2f2f57e2ccd299e75e1a1b4330569e6344b97b16828874fdfc44fdb7c9dd4f1aa63cedc67398bf4df62aa48f02ebc19f3747cd77e13708ff2ade4fd35a03

  • SSDEEP

    384:C0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26dWeEO7YpetOOtEvwDpjqIGR:CQz7yVEhs9+CO77tOOtEvwDpj

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-29_4eba46d0fe9d7ef412da4e1855f61933_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections