General

  • Target

    2024-02-29_d398f6363ce668bf51958e020e431255_cryptolocker

  • Size

    46KB

  • MD5

    d398f6363ce668bf51958e020e431255

  • SHA1

    1be54092995651d65a109c05ea8f700d2df2b4cd

  • SHA256

    4b13697e494621943fbb37892705bd6a26b48f4704165ff977390cf503b880e2

  • SHA512

    269b4f9564f71f7834858da259c547d73a66d9cc3f07b644f698767fa349791c41c6c08b20e0e144afdcb30a3ffc127523f2870a1b575d46e5166bd0c3a1b8ba

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLtldtb:xj+VGMOtEvwDpjk/tb

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-29_d398f6363ce668bf51958e020e431255_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections