General

  • Target

    2024-03-07_f6aa0d06270008eb5b06c5d846b0dcd0_cryptolocker

  • Size

    40KB

  • MD5

    f6aa0d06270008eb5b06c5d846b0dcd0

  • SHA1

    bf6989a4029b35f68cf26fc79ab9de66bfdd08a1

  • SHA256

    7e0f289abe3f8c7495107be5ac0901938b123d51248370c0a664f37f1e179f9d

  • SHA512

    98e4548130797403440abf26796b7a8dbe24dd77579512cb0e6d5096ba7ffceaac2321747428631b845fef0948d627a178cb5c4623443c196a7c4b8e547d2d17

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOG:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/Y

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_f6aa0d06270008eb5b06c5d846b0dcd0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections