General

  • Target

    2024-02-17_caf398efdc69cafe14e169b7f054c301_cryptolocker

  • Size

    100KB

  • MD5

    caf398efdc69cafe14e169b7f054c301

  • SHA1

    218d81726c0762d14b9a28a4a31dc326e01e41cc

  • SHA256

    9ab327353d9aefde092448c1e0225a2095b3f20301ad0f91e950492988e658ce

  • SHA512

    7ae498b45b42a7dd0fcb77010bb50140dfa077973ed509fdcf7da6a144f43667d2a9ed206f1d92a9a1ec83277e5f07ebe907bdcc956146a52f3ec8710990e72a

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2a:xj+VGMOtEvwDpjubwQEIiVmkxv/G

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-17_caf398efdc69cafe14e169b7f054c301_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections