General

  • Target

    2024-03-14_1b3c6bec5d6053250738cf6a95594b72_cryptolocker

  • Size

    93KB

  • MD5

    1b3c6bec5d6053250738cf6a95594b72

  • SHA1

    5aff34b70424fc22de625b9376ffaacfa259997f

  • SHA256

    6d304cba41f981dd56babcaff6726756daf7fa0de81137ac1ffeef56704f8ac8

  • SHA512

    5771623b5df7109f5c71b99f71beb75131b56d8c9eab60b5b1abebb2b1af711bed0f353dd04426e4079a79ef0761feffbd279b0cea055928b065cecfe75a166b

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvP2D:xj+VGMOtEvwDpjubwQEI8UtzNcO8nSx

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-14_1b3c6bec5d6053250738cf6a95594b72_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections