General

  • Target

    2024-03-08_f1bc0a296f13a7d22336df2e1a7e030c_cryptolocker

  • Size

    100KB

  • MD5

    f1bc0a296f13a7d22336df2e1a7e030c

  • SHA1

    f61298269fbbb4a8c991a63cebee1a019353c1df

  • SHA256

    5e3c76256f6f100ae5a492b98270567764d5ae7cbcc33596d095b79d494d141c

  • SHA512

    65ab3aeea9a78e13ebd8256f0eef36ccb67ac0a623c7c1b8dcd55433413f4cd37f11898eb40fa3a92cc961c3aa69d3f65612795e42ae823240fdb34c885a8144

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjzUNlYw:i5nkFGMOtEvwDpjNbwQEIikgNlYw

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_f1bc0a296f13a7d22336df2e1a7e030c_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections