General

  • Target

    2024-03-12_a291617b6b0b5d53e5f29467fb3534cf_cryptolocker

  • Size

    65KB

  • MD5

    a291617b6b0b5d53e5f29467fb3534cf

  • SHA1

    2db652ba0ad73a7caee5b07e23b22abce4d5a44b

  • SHA256

    ead26555f915a09376369e8cc7c62149ef99bfcfc14d4e94279298c8e8a11968

  • SHA512

    58b3486478c2191efbbfb39eb3b3508c00443e586e870a3120e016d0eb54d2cf1dbd8ba6021a5e6543f8d00a09bfcd6fd38aeb81fe5ded1d2657c8dc7823e556

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUI4vc:i5nkFGMOtEvwDpjNbwQEI8Uy

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_a291617b6b0b5d53e5f29467fb3534cf_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections