General

  • Target

    2024-02-21_e298be146fd78671bbfe9598bf38b4ae_cryptolocker

  • Size

    40KB

  • MD5

    e298be146fd78671bbfe9598bf38b4ae

  • SHA1

    44d0ac2bbb76b380b246674db96a17de1c968eb2

  • SHA256

    cd56e9b11bfa016c899c1bfb9282eb3457bceafe28bf9c30140a771fce046d95

  • SHA512

    f0cf2ed241aaab883550ce27b6955bc9de5c239c6f4fa4178b90d9f9dbe8d1f41e7f4a011bdf9bef0a1da2cf9954e47fb8b937f5bda95f86f2d49f255966da54

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOK:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/s

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-21_e298be146fd78671bbfe9598bf38b4ae_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections