General

  • Target

    2024-03-14_6b8bc7a71eed8ace7e63bdc0160829fe_cryptolocker

  • Size

    97KB

  • MD5

    6b8bc7a71eed8ace7e63bdc0160829fe

  • SHA1

    eb03be89bd0da9f3fa3b8717da2def0a6a34e43c

  • SHA256

    eb85c3972b4a79b969e7b73cd8cec91505e443f0e0dab7c66a7d6314c71c5781

  • SHA512

    0af650818b1a3b13a00078a4c5748cd74ef096e5d15d67988faec74e2cee0c39b7323dbcd4928107fc5fac44721849634e74ee1cfddb19d71f8a748a64752dec

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJvfT3laSbJ:xj+VGMOtEvwDpjubwQEIiVmkflaW

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-14_6b8bc7a71eed8ace7e63bdc0160829fe_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections