General

  • Target

    2024-03-14_a40721a902d6a7bb5303687b2417ee80_cryptolocker

  • Size

    87KB

  • MD5

    a40721a902d6a7bb5303687b2417ee80

  • SHA1

    a5e28dbfd42dd796cebcda8340ed9cb0e77b4c95

  • SHA256

    9365305a963dddb018efd24d6ddb185a58730e511d06db2a77a2364e984cb08a

  • SHA512

    a9ec9964db1a40b2b6f11fdffa25af07df4412b0c18d086cde046247396ee953aa10b20369e629c41f3b886370762698afb4685e0974c4b459a6aaaf806283a4

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAc/9:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8Acl

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-14_a40721a902d6a7bb5303687b2417ee80_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections