General

  • Target

    2024-02-18_c693d705968546e164745f619edaf9e8_cryptolocker

  • Size

    100KB

  • MD5

    c693d705968546e164745f619edaf9e8

  • SHA1

    ff646978bd8e3123df065cf8de63aa6c412d54ea

  • SHA256

    9ea99ddf52fdc11770317976133e2d90d95bd297cf606c39a1450938081cd3cc

  • SHA512

    fa5c87d8adce37a92575cf8d603c5f232c3603abda69aa1a9367e278425db048936d23b69be5d89711459e974e66f6f924fc193571f0f7b628954a9a99f27204

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k28K8z:xj+VGMOtEvwDpjubwQEIiVmkxv/wKY

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-18_c693d705968546e164745f619edaf9e8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections