General

  • Target

    2024-03-14_71fd387c75647cd1312f501a6029d332_cryptolocker

  • Size

    84KB

  • MD5

    71fd387c75647cd1312f501a6029d332

  • SHA1

    c56918eb0a80a5e6d613065fd1ce04abab3766ec

  • SHA256

    a85bb487ae5cb71be9d44863cb815e6cfd746bc5e7775a7c16fdde7eb22618bd

  • SHA512

    a5d2278b054b54e5eb7639088e7515fef6e17a281a857e42afbb24c86ffca3a22704b2816ef8ce63d4e71fa36502e6cf28c12bcf6669499c58a06fa87fda714e

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvKq9:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8Kq9

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-14_71fd387c75647cd1312f501a6029d332_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections