General

  • Target

    2024-03-12_728f3f12832e0e36ff8480b860fe9ec4_cryptolocker

  • Size

    86KB

  • MD5

    728f3f12832e0e36ff8480b860fe9ec4

  • SHA1

    5af3a490d5e8abfc96a1555900dd93c6bfbcb0f4

  • SHA256

    474de1de002f6ff2b3ec73aacb6341122c66a5b1e358ac942baf0878180d98ae

  • SHA512

    73d686c37f5a24b77a7397cb98508f18a38116e3a84f5d15f94ec210ebab45090b297083a0f7580bf245d2d61dbe69cbaa904eba12d764b5a2912fdb3dc9bf52

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvzkxraO:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8zQ

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_728f3f12832e0e36ff8480b860fe9ec4_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections