General

  • Target

    2024-01-29_bef3682ba0cdf7b292f7b03f734b3b00_cryptolocker

  • Size

    39KB

  • MD5

    bef3682ba0cdf7b292f7b03f734b3b00

  • SHA1

    ab6be951f3ea51c24de82c5f4fdfb2e2089f0780

  • SHA256

    e624ecbc0092ca3004ccad206b20897873e9415babf1c78f0489ada09d9bf5a0

  • SHA512

    e02c5af8ddaefcfb80be9bf8f2564c48318b3f5d653f8f271247fad0bad785e10d74e7a0cff9909c87f86e0c16f28a544de50bc9de285354d753dd7b60018fe2

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnH+:m5nkFNMOtEvwDpjG8hgpH+

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-29_bef3682ba0cdf7b292f7b03f734b3b00_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections