General

  • Target

    2024-03-13_c1f409a74fb520f5fc8024ab6e6ba5d8_cryptolocker

  • Size

    100KB

  • MD5

    c1f409a74fb520f5fc8024ab6e6ba5d8

  • SHA1

    b42a25a40fb80bf17e1b08b726028ad817164bf2

  • SHA256

    cc0a33556b6f25e9902c733ff4fa849dbe92fe3ebfd21e2215d4bdd9360c2b62

  • SHA512

    645aa98761a920ae5c6280b7a150b930c3f8cb92104a91bee17de6466a4a5d37b4fc738cf6ac3306418ad26b01724960e7828d26c7fffe09beab132776f5d320

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjz/6wf:i5nkFGMOtEvwDpjNbwQEIikrt

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-13_c1f409a74fb520f5fc8024ab6e6ba5d8_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections