General

  • Target

    2024-03-08_031909044a6fad496a63534f49211cf9_cryptolocker

  • Size

    87KB

  • MD5

    031909044a6fad496a63534f49211cf9

  • SHA1

    24dfb28dae575d8c96230f765d00c4d4c279a901

  • SHA256

    52bfed1a316e8999645b29f4bb82dba586342679a095b8206c1c8407a98c2da5

  • SHA512

    09ac044e2105df5e86baf44c0d099bf52725edee39ea20e82cba5e4f13f385cc6ee304b37f494e8887e2a0b46ba033ece833e58a8bc2c1bfd1bca99fcdc9d576

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAcm:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8Acm

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_031909044a6fad496a63534f49211cf9_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections