General

  • Target

    2024-03-08_fdf38639a741afc73cf5b697ffe2d4a1_cryptolocker

  • Size

    61KB

  • MD5

    fdf38639a741afc73cf5b697ffe2d4a1

  • SHA1

    ba95d1c3b0076b63761485805fcdb14765d37a38

  • SHA256

    b93d7e772859a1c81ba7a19e41766724ea2db549b88ba383e8e891ac9dd23128

  • SHA512

    8b68fb4714315e1ed30ac8775ff037608e183a022f2e966cf4e0ab7785834190d2aa27368cc9c6aaf2b4590518ab079ba82a18d66d40d671675573031e8ee943

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEiNJ:6j+1NMOtEvwDpjr8ox8UDEi7

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_fdf38639a741afc73cf5b697ffe2d4a1_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections