General

  • Target

    2024-03-12_db28207ccbacf0f110b9c3cf8ebb7c96_cryptolocker

  • Size

    38KB

  • MD5

    db28207ccbacf0f110b9c3cf8ebb7c96

  • SHA1

    e13171726f92db616e70fb738947909456534b50

  • SHA256

    129fae3d75dc98f2af5a88b95d313df7fa167320a91b03e1109295a8e721084b

  • SHA512

    436b42ed2fd14f771be6632e255aa55ebce03ae6de952abb9ed49f0d7e294dd4b0df6dfc5d4e29fb1ef9b620adf4ca24934718bb7c51b4fdb4b1a2bebbb0b048

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOON:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh63

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_db28207ccbacf0f110b9c3cf8ebb7c96_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections