General

  • Target

    2024-02-18_cf781e27fc6106ef9a8537a2c8179776_cryptolocker

  • Size

    47KB

  • MD5

    cf781e27fc6106ef9a8537a2c8179776

  • SHA1

    3768a0f4040a6984d7830fd64b50177b82a8eb6c

  • SHA256

    1902f46df98a0ed047f3cd0ad3a3ef5938d88d8517cd53e614d8a0b988d14d1c

  • SHA512

    ab09fce154f4bb72bd6503bcaf4eebc734e9cd368cd37eb1aff9c4948ae045261fd3cb35680cfdf3b4eb6d5bce78066a3f030c4df10d5b7f79778504a38e3540

  • SSDEEP

    384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/7Ioqx+:XS5nQJ24LR1bytOOtEvwDpjNbP/Moqx+

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-18_cf781e27fc6106ef9a8537a2c8179776_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections