General

  • Target

    2024-03-05_b500680ba701c0f4a0dc4ef74d6ec542_cryptolocker

  • Size

    49KB

  • MD5

    b500680ba701c0f4a0dc4ef74d6ec542

  • SHA1

    f6ee72873de25b78d56dd2019ff9c50e77fd57c2

  • SHA256

    3b050a736c6786af83b755446943c51310a5e80e615251955af329eb41c0a9f3

  • SHA512

    a5cd3ed5fc0b4bc397466e26533c64ec729f0635493516664093bd3cab3e85850a4381b5da2d21fd3cba7b368b39c07d4a77fb91869d96ea2eab17802d80dfc9

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaSvy:xj+VGMOtEvwDpjy+TH

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-05_b500680ba701c0f4a0dc4ef74d6ec542_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections