General

  • Target

    2024-02-29_d55240fcc1068ab3bb80a5497a842735_cryptolocker

  • Size

    85KB

  • MD5

    d55240fcc1068ab3bb80a5497a842735

  • SHA1

    fc329ac6b83200592ceca0a249e4dff117825977

  • SHA256

    852b0200768e940cbbfb2937a309f792d032a3a64747629406c241d51c4ceb84

  • SHA512

    deeb7ce37b03cfb113e596356a3ca5f23fb99eb35d8736a1fa43d1b075964ad6be0a46424149362923c927688e2dffb6dc5ecf0045a88ec6491116987eb50676

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvzkxr5:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8ze

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-29_d55240fcc1068ab3bb80a5497a842735_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections