General

  • Target

    2024-03-13_eff440b0e3dcd8779b566f58c6b1fcd8_cryptolocker

  • Size

    38KB

  • MD5

    eff440b0e3dcd8779b566f58c6b1fcd8

  • SHA1

    0ac39e8a8320d4bb643d706b2db3a63ea9b87501

  • SHA256

    2e0306a6aba42e8a57e48a58923040e99ef13b5c98373a5cf3b2054c7b05da4f

  • SHA512

    19155e4386860cbe3f035e2999ddbc36e089984a025bee0bf117f0b4279a7d65f5fc88b09f4f37197cc295befa3d42887742f3e7678d1932b6be957095a2bd2c

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOs:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6S

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-13_eff440b0e3dcd8779b566f58c6b1fcd8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections