General

  • Target

    2024-03-05_804a40c749bc9813b062a024bb2f2ad8_cryptolocker

  • Size

    65KB

  • MD5

    804a40c749bc9813b062a024bb2f2ad8

  • SHA1

    32eec545d3ee73067ba5f4ff9b340a87865dde1f

  • SHA256

    0da00d9e1a63632ea79f1a59b4fe06607560b4caa76cefd8f490b41ff3c43270

  • SHA512

    0f6cce175d0be02451e2ffe4e6271805f25408d6c9846a842432e11c5f3427a40616dc6de0940dc0a46fb2f8facbc8cc4feb7772011cab1f4604551d8d13feef

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUI4vj:i5nkFGMOtEvwDpjNbwQEI8Up

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-05_804a40c749bc9813b062a024bb2f2ad8_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections