General

  • Target

    2024-03-13_498f047502ddd3193d17b3b97623c572_cryptolocker

  • Size

    100KB

  • MD5

    498f047502ddd3193d17b3b97623c572

  • SHA1

    34c0ae00c3f7370cd1a2cce14e41d34968cc51f9

  • SHA256

    7e581bff9a10d14565a556586aaeb5cfa234cfda95707c1db6bc8f532ead7ea9

  • SHA512

    74a665143581025ca115feef9edbe40b3c4ac63bb7658b021fe151e99f402f1d870a96003292c12aabf4cddbdf2c6e98a06e864bf11cf80c6a0f82600dbbea25

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2yOmiF:xj+VGMOtEvwDpjubwQEIiVmkxv/usF

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-13_498f047502ddd3193d17b3b97623c572_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections