General

  • Target

    2024-02-20_d1985add790982110a0c9bdd3a591f29_cryptolocker

  • Size

    40KB

  • MD5

    d1985add790982110a0c9bdd3a591f29

  • SHA1

    20acaf8a3cd51e99e319bc929ae6f88257790a36

  • SHA256

    516151954b654322038b29a655c399d293a49eeea4305739e7af58c6a6cc1aeb

  • SHA512

    df37f109b6826d1f17a07bb617480290517d264f4d627519b590270f5a0cdc39f7277a3921f895147b88ef2f032794e6491dcb5640bf59941eff1ebdf2356e18

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOt:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/P

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-20_d1985add790982110a0c9bdd3a591f29_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections