General

  • Target

    2024-02-18_c59f61810db5fbe41aeae21bf229b13d_cryptolocker

  • Size

    54KB

  • MD5

    c59f61810db5fbe41aeae21bf229b13d

  • SHA1

    0ab3aa1c0866c49b8cabbf2de046a1ec35e21743

  • SHA256

    8b2ed117ecd8c3352e98bca6ed077719efb5805af1e1a209969928e883831803

  • SHA512

    48186c9a825b1bb85b5835ede25fa00c9906d86d57891353f0fc714eb242309a5cf6acff97aa713c476b2513f6fa4506947b8953b0dd4c3a307c89542bb321d3

  • SSDEEP

    384:x0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26a4rIcVRYp055TOtOOtEvwDpjqIGR5F:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbKY

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-18_c59f61810db5fbe41aeae21bf229b13d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections