General

  • Target

    2024-03-08_85a564ff9cfaf930c844a88a5a702cf0_cryptolocker

  • Size

    100KB

  • MD5

    85a564ff9cfaf930c844a88a5a702cf0

  • SHA1

    efa80141f35a0e9ad8c52b397710b51dd5e3e38b

  • SHA256

    a2cacee22614bf6c02d9de80fb5029451b59ad24d5d498b0294da33797c1db67

  • SHA512

    a526c28e0c5ed86fb4c6468d56f6fef4fc023b5b25f6f0066d200dd6fe317ead7c27cf065849007535529460cd0ee28315f767331b323a853cae03e01479621c

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k24:xj+VGMOtEvwDpjubwQEIiVmkxv/s

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_85a564ff9cfaf930c844a88a5a702cf0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections