General

  • Target

    2024-03-09_df5a0318131f1907deb219f2f08c2fb0_cryptolocker

  • Size

    100KB

  • MD5

    df5a0318131f1907deb219f2f08c2fb0

  • SHA1

    6a79041355518617b796aac1cfd6a433ec18e32c

  • SHA256

    2b01c66a3d38e1ade16794bfe687c5d4580f624a7a63f31cfd620ebcdcb74993

  • SHA512

    5984fbdb69fd7d8b78e0648437da2f98630f5a8d358eaa5f303b60473ea1772540d6c467173629c7fdb2de11216bc48f1ed727f2f35092c575569befb018374c

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjzUNlYb:i5nkFGMOtEvwDpjNbwQEIikgNlYb

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-09_df5a0318131f1907deb219f2f08c2fb0_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections