General

  • Target

    2024-02-28_c5b291b3f0c57358de9256b767466f8c_cryptolocker

  • Size

    85KB

  • MD5

    c5b291b3f0c57358de9256b767466f8c

  • SHA1

    4eaa959921c6454e0fa1aa8c61e5d0318e7b34fc

  • SHA256

    3350e7d21f66619c198c1958031d4f07312f95d460b1b6dc4f86f9e5be2d2f3c

  • SHA512

    f5a297ae5689190bb4e53371545f3f191043b8f0bb523e390da00c837dcac26f0b231d52433f8e3d14fd256cbc1d81c723702d26825a5ac1daab508cca740744

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvxpRZOg+:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8U

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-28_c5b291b3f0c57358de9256b767466f8c_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections