General

  • Target

    2024-03-12_e4a3d1b79d8f832c0e2a1bf10f5496b8_cryptolocker

  • Size

    94KB

  • MD5

    e4a3d1b79d8f832c0e2a1bf10f5496b8

  • SHA1

    ef59acfc05915517bdfd47b27def0bdfd6f2a709

  • SHA256

    b712092641448766bf11f48511772c9dc4c689c91c25d64942f4ab9bff96ff4f

  • SHA512

    4be6790088bd383c51e5af409ddc5a7560915a5e4c5c9f5225a85d66bc3ede96306ada9c2908edb6905fc6f9c527c08d51c680afa3a45e567b56fae55bd7372f

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJBQx:xj+VGMOtEvwDpjubwQEIiVmkex

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_e4a3d1b79d8f832c0e2a1bf10f5496b8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections