General

  • Target

    2024-03-06_803d5d319dfa9001bad4de6a430b4575_cryptolocker

  • Size

    101KB

  • MD5

    803d5d319dfa9001bad4de6a430b4575

  • SHA1

    b76d7541af791fc3f4e5e8177f012a670655444a

  • SHA256

    0a216e3d71d7f945896c2ffc8f608b34d0c2c45e9b6baa2de25f49dbcb87278c

  • SHA512

    aab13e35a00472c659c1750301cdcc72448b156718d7da0252fdf017bca505781b6a336b8309b4b70505ec4c494acd0f4713f153306ea35d610aa58b01c576ba

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k28:xj+VGMOtEvwDpjubwQEIiVmkxv/4

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-06_803d5d319dfa9001bad4de6a430b4575_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections