General

  • Target

    2024-03-10_0851eb434958afeb153225338a25646d_cryptolocker

  • Size

    87KB

  • MD5

    0851eb434958afeb153225338a25646d

  • SHA1

    ae77110fa0e14d671e1f0c6d8d8b19df4a84693e

  • SHA256

    72b28ba90127b075510cfa3d114564f5ff523b0ebb7a07620e1fb2f8100ef1ea

  • SHA512

    f6ada8c2fc0d5de0db95ea9bbdd85d76a76b6daf22c5cba62e37c3f74529c0c827c1929937ffcb7157174f8e520f719202c325503a4e816d3076b95d1ac35d6c

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAcP:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8AcP

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-10_0851eb434958afeb153225338a25646d_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections