General

  • Target

    2024-03-08_fefa708bfe241d6f8f576e246c183b24_cryptolocker

  • Size

    37KB

  • MD5

    fefa708bfe241d6f8f576e246c183b24

  • SHA1

    359c845263289789af0600fee236e48d74099499

  • SHA256

    d203b6ba35eb762e08f307e52637aa45c79f698636d7a74e5874dd12b5647c89

  • SHA512

    e5a8dcbdfe15ceb6a53f511c9f2fa82ce934be2bc6151a1dbf791ff160ba19463c19149ab8b8c69e36aa1c353bcb40363f2c5123410524e8c010305faa0bb627

  • SSDEEP

    384:+cX+ni9VCr5nQI021q4VQBqURYpetOOtEvwDpjqIGRxzOP51FqQLicn3f3VhBlXW:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnv/W

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_fefa708bfe241d6f8f576e246c183b24_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections