General

  • Target

    2024-02-25_b5238cae8f4ad4174d1c68e3d77bd1e7_cryptolocker

  • Size

    85KB

  • MD5

    b5238cae8f4ad4174d1c68e3d77bd1e7

  • SHA1

    feb6465b29c8b285508f07895b775601af7b6aa0

  • SHA256

    25b60a3c2cedc78087108b7833ef163a0aa4c9e4a5834dfdf8cc291b0b85bcf2

  • SHA512

    44c40503976e8393459ad40e2a0db906d34196bdf3ebb410bd75e55d9f9e11bcd62508894feb27f3d82a6fb631106504683e8746a8dd71bddd580668c2ac6170

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvxoZ:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8uZ

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-25_b5238cae8f4ad4174d1c68e3d77bd1e7_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections