General

  • Target

    2024-03-08_a46b962a9a7a52e12b4863f8b2a40662_cryptolocker

  • Size

    87KB

  • MD5

    a46b962a9a7a52e12b4863f8b2a40662

  • SHA1

    e61e96745c84d5bc48efc084f480c53aeb4211f5

  • SHA256

    83dead76da4ff462b6fa834a1d7a485f7903795f01eca124ebf275b31ed3a8b7

  • SHA512

    766e85f7bbd42cba7b80bed372b9b11114dcb581679585d1c6c9a3aa3b7c34cf91ab77a0d80dee71ea6bd11b3132eb531fa628a99a7a89374dd4d2f5ba1f3b48

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAcz:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8Acz

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_a46b962a9a7a52e12b4863f8b2a40662_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections