General

  • Target

    2024-02-23_d8b8a8bece506bc06f0ba3c4dc1f6482_cryptolocker

  • Size

    40KB

  • MD5

    d8b8a8bece506bc06f0ba3c4dc1f6482

  • SHA1

    573e859ed34e20fb07b2d83ef882e3549f585806

  • SHA256

    65c72f84dae3834ef8a8c60eff487e171884266dca1e81a4854f33fd6264b209

  • SHA512

    4269bb2ed7d084c27d21143a78ae10f81b610169a061f68354e92a1211afafb19bda3a3937690322fbdf8a8062b5cf88e22b9ae1b211cde2060262f62857c75a

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnHI:m5nkFNMOtEvwDpjG8hgpHI

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-23_d8b8a8bece506bc06f0ba3c4dc1f6482_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections