General

  • Target

    2024-03-10_fbb4aaf5b692f402601aa940a405a5f2_cryptolocker

  • Size

    93KB

  • MD5

    fbb4aaf5b692f402601aa940a405a5f2

  • SHA1

    a1af110286440b683aabe3268f7fa698df3a6757

  • SHA256

    ef250306dabf1c7413c903900896c96479407c9708fa019f0e0bb517bef6a477

  • SHA512

    b1ac664d06195453815e171811fdfffa3a95a1a405860c0778a6ceafb65b800a0777e1854a1cb092245800b19a0c46ec488aa62c48594ad9a352ea068fe0566b

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvP2c:xj+VGMOtEvwDpjubwQEI8UtzNcO8nSK

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-10_fbb4aaf5b692f402601aa940a405a5f2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections