General

  • Target

    2024-02-14_5ed41bd203f90a07449bf063a8d3a4e0_cryptolocker

  • Size

    101KB

  • MD5

    5ed41bd203f90a07449bf063a8d3a4e0

  • SHA1

    5ec732b1f0073ccd58b56c3e2c8a8576b80ef0e5

  • SHA256

    0946797666b4356e98302191f797cf6b9f3235b5a4fbed6ec63a0a3e310979d9

  • SHA512

    837ebe935e982b5c755e71a00dc5bb14dd1e933728472fe55aee1914f79538289ec79f028e7f7e4d2b2eacb0706179b21608cf936902321ddf3b9b0ace3f1e15

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2NMa:xj+VGMOtEvwDpjubwQEIiVmkxv/Z

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-14_5ed41bd203f90a07449bf063a8d3a4e0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections