General

  • Target

    2024-03-08_485ccc70595951a0649ee2b1f3e57950_cryptolocker

  • Size

    100KB

  • MD5

    485ccc70595951a0649ee2b1f3e57950

  • SHA1

    fd6d63d909c54d6faa42bc3e39f4d80cd9b5fe70

  • SHA256

    0d132abc52eee8f59ef2717a003e6daaefb7ceef8f5910e27564ceefffe6694d

  • SHA512

    797ccb8a0e4300afbaed25146a225870db64ae9f93c7cc97b249033b9833b86f0c91aeb0ad9c40967efbad3930764cceaa1344f177b3e560caa66ddcd4f1aba9

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjzUNoZ:i5nkFGMOtEvwDpjNbwQEIikgNa

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_485ccc70595951a0649ee2b1f3e57950_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections