General

  • Target

    2024-02-22_ab6848fa8bd5eca065c94fadffe0701a_cryptolocker

  • Size

    40KB

  • MD5

    ab6848fa8bd5eca065c94fadffe0701a

  • SHA1

    fb20a0680a45bc584799e36e95912062d0535dbe

  • SHA256

    ea6ee7df81ff4f1285d19a7a4be13a26d378a02898386f9b9c37be7f531216c3

  • SHA512

    ccca35173336ffdd5f5b984ca478f949b635a01db190125a838aef9a2958fb7de13f5f3fb04b7e78e3fcc926b4ce88e0b21b03bae42e478376bd9eddd56bd02a

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFR1/:m5nkFNMOtEvwDpjG8hhX3/

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-22_ab6848fa8bd5eca065c94fadffe0701a_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections