General

  • Target

    2024-02-22_fc5041368397cbb183cf11224e60f48f_cryptolocker

  • Size

    40KB

  • MD5

    fc5041368397cbb183cf11224e60f48f

  • SHA1

    3fdbb7a2c9801def8dbac518a4b8d98e08436970

  • SHA256

    0fa0340c7828ff88beb3ed3261b3ef6e57943389d0842343ee2058af4cec8c6a

  • SHA512

    862e5aa72c04ac36dbbdb1998665588906a31087c5341e5aa9d1eea8ff428cb5657f06b460325afe773274b15b3e269b66e65cc6182592f12a7ca2c11f9f8dde

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnH8a:m5nkFNMOtEvwDpjG8hgpH8a

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-22_fc5041368397cbb183cf11224e60f48f_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections