General

  • Target

    2024-02-18_f20937953a4e077a1682ed5ea92d5216_cryptolocker

  • Size

    86KB

  • MD5

    f20937953a4e077a1682ed5ea92d5216

  • SHA1

    2b81fbd4c16bb6a35f61e96deb234086e4b7f414

  • SHA256

    a7f2ce1edb8c1dc7276e61f642fb3a73fa7a92a8bfd608e9bd82c20a333ad9a2

  • SHA512

    3397fd4cd53588bc49158837a0737ab24ead16070261c1e42c5e57125ba108d9e32101b8b760a3716a4d0f4e873cb8f38cf6134e63f7473d5c1d2bf0e803c712

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAc4:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8Ac4

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-18_f20937953a4e077a1682ed5ea92d5216_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections