General

  • Target

    2024-02-29_5cef6ab2ed89db8ef7a515511d673b75_cryptolocker

  • Size

    85KB

  • MD5

    5cef6ab2ed89db8ef7a515511d673b75

  • SHA1

    d79faec83e0d87428e221ecf77b5173cbc2e8399

  • SHA256

    23eb2c71b69ef709026c3af8aa9878b064f20fe37b2598161e31125fa0fd3652

  • SHA512

    88de438b39d9fec170e538d7bfa21058e9814c01c693d494a3daf5e5201d00ea7baf0d68a1c79170b5304d714b2dbe6caf2a94624a3968b5af4b6628ab7bf2ce

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvzkxrx:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8ze

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-29_5cef6ab2ed89db8ef7a515511d673b75_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections