General

  • Target

    2024-02-04_dcde6de2888fb84ccd50c9b45dfeb6c3_cryptolocker

  • Size

    40KB

  • MD5

    dcde6de2888fb84ccd50c9b45dfeb6c3

  • SHA1

    5abe27d4bf05952277690cd76b08094c9b792883

  • SHA256

    c58cc4f0db824c0896b611b8327f71c9d7b155eb2f63aa9ffb45d0acee02ac86

  • SHA512

    17bf7f23823fae3256413695c80e3a4101963147dfe7e5409f4553dc62bfbcbd875c054df2e28240418023c8bd6686cbc4cfc891d7437283eb4192bc1daebb55

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6n8VO:6j+1NMOtEvwDpjrR8I

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-04_dcde6de2888fb84ccd50c9b45dfeb6c3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections