General

  • Target

    2024-02-22_b0b5e603aaab31bb2ac21d9c5434d12b_cryptolocker

  • Size

    85KB

  • MD5

    b0b5e603aaab31bb2ac21d9c5434d12b

  • SHA1

    84320989c8a8dd7d12d417fdfc744a0f0e0f23bb

  • SHA256

    cb534d4dfd29663ed792eed53863114614b57193652111c70f71965f9b55325a

  • SHA512

    54c5e42dcd6712b2e2bceff9002bdc0e07cdf9f405acbdb3cd457643d51587b7db697de2fbceef909aff60e54f65e62b6458c77f273fce25dceb98ab91cbe678

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvzkxrW:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8zR

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-22_b0b5e603aaab31bb2ac21d9c5434d12b_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections