General

  • Target

    2024-03-06_35348c88499bb12714f7a7161db8f978_cryptolocker

  • Size

    100KB

  • MD5

    35348c88499bb12714f7a7161db8f978

  • SHA1

    531a03539d34eaca896b7f669691b9c0fffda910

  • SHA256

    6bace82307a1785c421c0f96a00c282cf67d8fd9fe9635b1d24376d01defcb43

  • SHA512

    38860362f64da94b26e2402dcb88289d54efe86f5deaee92f618a68c35bfb6b0b909f6b9744e27687b059132012ce23b887368d1d56e6feae4ff8a897bbf0da3

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2c:xj+VGMOtEvwDpjubwQEIiVmkxv/4

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-06_35348c88499bb12714f7a7161db8f978_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections