General

  • Target

    2024-03-12_8e9f48f5e5a6e25faec814ed81f7dbf8_cryptolocker

  • Size

    102KB

  • MD5

    8e9f48f5e5a6e25faec814ed81f7dbf8

  • SHA1

    c660d23217e5aa17ae76be0c4ece8fd10ae6e553

  • SHA256

    b7802248b5aed274c5d95f746204491aa98ad28ac5960bc998ed255e82a1a12f

  • SHA512

    c8dc7923b5aae394555cc5a2511019450d4a8864cc5fe126ea103b6afccd14d01ad6272a53729b707a37ce3552470a39908b4a7d40c4ed59fd075bdbccdfe9f7

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k280:xj+VGMOtEvwDpjubwQEIiVmkxv/w0

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_8e9f48f5e5a6e25faec814ed81f7dbf8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections