General

  • Target

    2024-02-28_a0e56ab052589d7f65d24e3802065879_cryptolocker

  • Size

    40KB

  • MD5

    a0e56ab052589d7f65d24e3802065879

  • SHA1

    05b2f3d556fb3219214356651152b96059b2500c

  • SHA256

    8712f2b189b5240a6a71fab97e0186eec556efad78ed43c6a47d85d89b05bf14

  • SHA512

    2fa878a8abf40a81fa075f98889bf51274dd68a514100b0530c517bb2d224030327a0042c4ffca5207c6a9a168720ded7e7b915d40b8e5c1c5d3a512cb39c75a

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOc:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/q

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-28_a0e56ab052589d7f65d24e3802065879_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections