General

  • Target

    2024-03-12_f81f6bf0e32e6478f5ce4e29f595998a_cryptolocker

  • Size

    86KB

  • MD5

    f81f6bf0e32e6478f5ce4e29f595998a

  • SHA1

    96e5883c6e4543fc7256c41765341bfceb562781

  • SHA256

    6e74342bce9b7c65d80143b9eafbf6124c9390870e5963762f63838a26b03830

  • SHA512

    5c2db962df817a30b58b56a0b4425294165235cc51b08c02703c698234c98d53eb6b99dcac1a860bedfff1d50221a63a2237c3a254b6dd5746f9f1e1a43b67ee

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvP29y7:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8T

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_f81f6bf0e32e6478f5ce4e29f595998a_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections