General

  • Target

    2024-03-12_5b993c8a67d436cd34caae8e94a72df4_cryptolocker

  • Size

    46KB

  • MD5

    5b993c8a67d436cd34caae8e94a72df4

  • SHA1

    5148acf0dcb361ab41eac1c2b9f9596434788c04

  • SHA256

    efbd45b7e22490f2b5d5f6e41b4b87eee63954033ee81cba4a2fa44c07143dee

  • SHA512

    cbb6f707d8f4f47116a4b142f33a05137d7a8ad233854aa10be9fa4db533ae8ced4f39c0402c143f84c24df9fe1a9e1759569b051fd101c015474ad3ed85af2d

  • SSDEEP

    384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/7IkB:XS5nQJ24LR1bytOOtEvwDpjNbP/MkB

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_5b993c8a67d436cd34caae8e94a72df4_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections