General

  • Target

    2024-02-24_28caad1c87ffe125aa3e0587bb80dd69_cryptolocker

  • Size

    101KB

  • MD5

    28caad1c87ffe125aa3e0587bb80dd69

  • SHA1

    6ccf913463bbaf946df666f684e9c0aacea995b8

  • SHA256

    1341f83fd7e8ed71461e54cea3f8d9f616df9be4a768570ffa2e671428e9b828

  • SHA512

    0a1be73c1f7a4b6f53879f77d498a667c4d3ead8c6507a77681f01068d4bd2417ebc94bdf492d4bf4a2988b982482ce4fca61c2a62e528731685af79c5ab6aa1

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2NMOE:xj+VGMOtEvwDpjubwQEIiVmkxv/zE

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-24_28caad1c87ffe125aa3e0587bb80dd69_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections