General

  • Target

    2024-03-13_d2f297d7aa83cefcdb3843747d5bb5f2_cryptolocker

  • Size

    38KB

  • MD5

    d2f297d7aa83cefcdb3843747d5bb5f2

  • SHA1

    f549bb712f0b5f99b6109d4a470f4a13fed582b5

  • SHA256

    eafcbbc78d35c0417925ed433b6eda5bd929a30a0aa02377770e1c2cf59aae65

  • SHA512

    6d2109695128ed2a693cfdecf2e81d822aa4605319f30a7df6c5441375801e328492885aebdccbd6c95e8df36972a28319dcb20d085fa955651d4d869e483e0d

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOn:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh69

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-13_d2f297d7aa83cefcdb3843747d5bb5f2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections