General

  • Target

    2024-02-19_f84bf6e1d804cf2f72570409600d8aa6_cryptolocker

  • Size

    86KB

  • MD5

    f84bf6e1d804cf2f72570409600d8aa6

  • SHA1

    02b2a9a84b9b6b51c70787ccc88f7de9c57bffbb

  • SHA256

    6f1b90d0f98c373d002becc39d5a5c70fd7fe8bb335164c8cf917694bae46083

  • SHA512

    04cbb2d969f23fb38d3ca53d0a44ce107b1393c303e662d2a724cbbb76b16e095d0a78dcf0a8dd7c41d5ca5fe2b1273d63368503649504eac550d9c17fbcd48d

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvxiGx:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8Tx

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-19_f84bf6e1d804cf2f72570409600d8aa6_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections