General

  • Target

    2024-02-18_3b9c016c213f1672858b977c614e7668_cryptolocker

  • Size

    101KB

  • MD5

    3b9c016c213f1672858b977c614e7668

  • SHA1

    f25fcdae8da9c86ace3b629bc56c2c82ba28e379

  • SHA256

    b8a95643a4446cb6824dd5925acbfa48a70583d54b4ebf95d0b2d0df279da919

  • SHA512

    e2cf49891ca061e2a956c100ed71c4a4ae6ff1d3f2115c39e4dd481dc686c1a88407d50e21cad8d1aeba3bbf384140b6d9c65ad8426996abf8e274ef55eac946

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2a:xj+VGMOtEvwDpjubwQEIiVmkxv/m

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-18_3b9c016c213f1672858b977c614e7668_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections