General

  • Target

    2024-02-22_a1f70b7a4c0409740d216c7fe1e27d05_cryptolocker

  • Size

    95KB

  • MD5

    a1f70b7a4c0409740d216c7fe1e27d05

  • SHA1

    0d0205b372ce6dc50f5bd91d7f871891fd421397

  • SHA256

    59a6680a15f5c0c159f4e7419e38ad74b6d28f8958923dafae1d9a8a41ff6b33

  • SHA512

    7f6d0b683c925aabad908a1af2d9fad39880384b3ca3802aad6ee48114b858401b2237efeb88d9c25ee3533887aa1a71a6acb772bbb8a97b41bc1c64928c40cd

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJvfT3XU:xj+VGMOtEvwDpjubwQEIiVmkfXU

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-22_a1f70b7a4c0409740d216c7fe1e27d05_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections