General

  • Target

    2024-01-29_ab5b8329d12f1277a4393d5bd1cfc8b7_cryptolocker

  • Size

    38KB

  • MD5

    ab5b8329d12f1277a4393d5bd1cfc8b7

  • SHA1

    2f2e382a05a770784133f009508f221c94f97b6d

  • SHA256

    b691aff3b20e64dbc5d84c73db23a51ad87666c38b2ad607013629d0a33fd184

  • SHA512

    74e6518e65aebc5e4a36280c4bd885d73d2c86d6b3221f85794045db89d3a22824d9df1c20de8338b4fd0b0e5438f64978cfc7579134e82a3c50f0dfa78dd67b

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOG:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6nA

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-29_ab5b8329d12f1277a4393d5bd1cfc8b7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections