General

  • Target

    2024-02-17_cdb0631ff68031db516773e3f4e182f4_cryptolocker

  • Size

    100KB

  • MD5

    cdb0631ff68031db516773e3f4e182f4

  • SHA1

    4b70e935d271b147645753b54bfd5d1251797a33

  • SHA256

    84dd0b37ee5553fcd9e0862ca0d0d588f845b9ad8b4d8cdf12c540dc80d18d4d

  • SHA512

    2c1fb1341a820c61564114ebca5ae9d49af7210096e57c6144507d1625383b1ff9d8db8d908e40501c4a4beea9d219bcfb0904b765207d7ad603fc6fb5b82003

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k26:xj+VGMOtEvwDpjubwQEIiVmkxv/m

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-17_cdb0631ff68031db516773e3f4e182f4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections