General

  • Target

    2024-03-05_9e72e536c82e28677fe885ffd7aedef0_cryptolocker

  • Size

    101KB

  • MD5

    9e72e536c82e28677fe885ffd7aedef0

  • SHA1

    2bde8456afb978bea2593bba83919f75a88037f5

  • SHA256

    0bfb119b3c62958c32c3a276e7f6f235dfa22a68d0f0384822d510e760ea0099

  • SHA512

    c8af3342be184f227d0eac75d6f7e9fb830d1ea119b708e9739158c8dfe9dd2d4784ac5471d32bb8e62fb783a539096d4648bae1ab3280fb533c8eaa6173fc49

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k28R:xj+VGMOtEvwDpjubwQEIiVmkxv/wR

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-05_9e72e536c82e28677fe885ffd7aedef0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections