General

  • Target

    2024-03-05_c19ea8073653f60a731e1be5bba6ab3a_cryptolocker

  • Size

    101KB

  • MD5

    c19ea8073653f60a731e1be5bba6ab3a

  • SHA1

    9dc06ee29ade8e039455552684d54aa8b24d9be2

  • SHA256

    a11c580b194f49a19845e1a31fa58923c8ae516d41e09145f2b78c28d59545e5

  • SHA512

    03cd58b7f4118da60c3c535e79019ffb1ad41d34c4f65e665424c8e08821b71cc241d5a60bbe7fb3dcd684ff3feba0af425ffe7bbe61e991517138378aed5314

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2y9:xj+VGMOtEvwDpjubwQEIiVmkxv/Y

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-05_c19ea8073653f60a731e1be5bba6ab3a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections