General

  • Target

    2024-03-08_d2853e6a2a7ca488fb7e04431b3dd7d7_cryptolocker

  • Size

    97KB

  • MD5

    d2853e6a2a7ca488fb7e04431b3dd7d7

  • SHA1

    e977ada03f6c557f9304d47c72e021c85c957bf0

  • SHA256

    661956873bb964972493c66776dc92d9114bbe5c35761414f8e285a9a908b438

  • SHA512

    0f6ce1642e4538aa94a758406bfa2271585b2f1e6b86375d71a5c1a2d735eb8a33417d636d3894c348f13b4f91bede183794bc8afe7f98cab62dd4699c5d178d

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJvfT3laSbQ:xj+VGMOtEvwDpjubwQEIiVmkflaz

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_d2853e6a2a7ca488fb7e04431b3dd7d7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections