General

  • Target

    2024-03-05_b1dab2a2f30318d8b6db5b4ab1ef05e7_cryptolocker

  • Size

    66KB

  • MD5

    b1dab2a2f30318d8b6db5b4ab1ef05e7

  • SHA1

    29ee47fb4d7cdea16be8de1c7b828f7fe30f5c95

  • SHA256

    ca1880acea22af5617d3a4e66bf4bb856cf4be56590dd76323abe9c16ce54c83

  • SHA512

    5fb37f69551bc5e8aad8ba5d682758df7c1d9a19c9fe8c6b0bd106856189fe4a7739fe27ef2151a06c7cf13d8630499f0fdb4e9a7ed1505bde0c520ff9ed9b7e

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYDu:i5nkFGMOtEvwDpjNbwQEI8UZDu

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-05_b1dab2a2f30318d8b6db5b4ab1ef05e7_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections