General

  • Target

    2024-03-06_dcc969ea8d1c280ab258b96695b914de_cryptolocker

  • Size

    87KB

  • MD5

    dcc969ea8d1c280ab258b96695b914de

  • SHA1

    76be51fd05cfdc609c0f25d4b5cf3146f8448bb9

  • SHA256

    247d78da6f7468450232cfdd26f1a1a1fb44e8946015a35bfd15b719f379019b

  • SHA512

    b10e2046f2131e6569bdf8f7393c68a5498894824826fe4551ecfb1df30e6a7d4cbe9c7d14ffb0b0737259dc9a11495ffcb4cc1bec5f547f536772b2cdfc4445

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvxgn/:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8y/

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-06_dcc969ea8d1c280ab258b96695b914de_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections