General

  • Target

    2024-03-12_083faf184d7e88a55d04e31a7393cbd7_cryptolocker

  • Size

    102KB

  • MD5

    083faf184d7e88a55d04e31a7393cbd7

  • SHA1

    22c195f4ca928336031ed749cb0ea715f97f6fe5

  • SHA256

    682ba8fc5f80943036c86c1f21443970eda9f9ff06ba8cf14f713219b07d3736

  • SHA512

    760e2b1b42fb2906fac21b9762007a228d272f28765ec9197dc5597bd91087716361e88ad8b69ceb1db25f51fe8ffa36fa57128efbfbf9d8ba2c707a85bd35b1

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2mwVeM:xj+VGMOtEvwDpjubwQEIiVmkxv/CM

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_083faf184d7e88a55d04e31a7393cbd7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections