General

  • Target

    2024-02-18_faf5217098e1f0bba7f248a649321f50_cryptolocker

  • Size

    64KB

  • MD5

    faf5217098e1f0bba7f248a649321f50

  • SHA1

    33831d23112696cbb2c3656723a1455975068656

  • SHA256

    f97cb89311b307d60bb7297d0094c2869217cc268402d5a94a59d144a0fb6e58

  • SHA512

    9ad5e408e8807de3fb7cdc5d60cbb14943751e85b4c87f0c942c5e3ad954a59a0eb744b9378661c3308dca03f16eaa2c44b7a21a35ed67f4694fe974d094637a

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUIB:i5nkFGMOtEvwDpjNbwQEI8UU

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-18_faf5217098e1f0bba7f248a649321f50_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections