General

  • Target

    2024-01-29_28b22fc0b5858b654b42e6a884f4d2c9_cryptolocker

  • Size

    56KB

  • MD5

    28b22fc0b5858b654b42e6a884f4d2c9

  • SHA1

    25b2e24a639718a3d0cfd181fc002cf69f249b2e

  • SHA256

    aa4f0bf6b4da6b53251d3fedb64d2fe9f7c28ddc9570cf8c220f68548b997efd

  • SHA512

    3a81db97e7a720d0e0fc5d1ca72af1ad41c73ffda18066b8ed6bacc759fa1bb47a0a76cc55b2ddd1077f91222f1964f5f075c7a267fc89de10de2174e6ff9995

  • SSDEEP

    384:C0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26dWyKYpetOOtEvwDpjqIGR:CQz7yVEhs9+U7tOOtEvwDpj

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-29_28b22fc0b5858b654b42e6a884f4d2c9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections