General

  • Target

    2024-02-20_6b489d1e92a77f06c1904fe10e0a5f8d_cryptolocker

  • Size

    40KB

  • MD5

    6b489d1e92a77f06c1904fe10e0a5f8d

  • SHA1

    34199d584eb245ac90260a02dcf3c170cb91dc5d

  • SHA256

    87f03caddbb668419218be99c00539bcd28820042087db208b137a3dc8d77d5c

  • SHA512

    8ce63512c99f312757868ed5c3cd6b88845e801ad35144dae0d820250d705aec7019d08edbd3299682aa20096694fdc14e993ac36009d4d1ed4e172e9f381326

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOt:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/v

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-20_6b489d1e92a77f06c1904fe10e0a5f8d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections