General

  • Target

    2024-02-13_c01acff7910cf8ab2a23e32007a08599_cryptolocker

  • Size

    101KB

  • MD5

    c01acff7910cf8ab2a23e32007a08599

  • SHA1

    2bb7ffbd6d0ff271ae83ad64d949d27d3ebafa2f

  • SHA256

    79ba865a06f3a04897f78bb340ca2c1597733a39ca674dceaa19689ef1434f46

  • SHA512

    c4c6fe281f141cdb00bbb63a69ba96bfce604123f1a0e2f5a3232d28543c7daae47e6bd5e46cfc9e4c6a2e39f3bacd4f4d4378439d8dfaec1d8f6708a0069b3a

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2wQHq:xj+VGMOtEvwDpjubwQEIiVmkxv/5Hq

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-13_c01acff7910cf8ab2a23e32007a08599_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections