General

  • Target

    2024-03-15_dea3a1c5763c4d99eaaaa50d2962e6a0_cryptolocker

  • Size

    100KB

  • MD5

    dea3a1c5763c4d99eaaaa50d2962e6a0

  • SHA1

    ce835cafc32f666f60cb386d59c988afdb211dd6

  • SHA256

    93bfd3339f7bc3c39026d7bf499f0c338d938edb0401bae90b6362c4697f0268

  • SHA512

    72ef481198bbeaa60ddb8654ad6de71104e7b7d0ce80e16dd247d989f261f3f4990ac078380cce9ffdcd89e1b1ed4b0e2777195fb8ef290d20bc2ff5fc53be0e

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjz/6G:i5nkFGMOtEvwDpjNbwQEIikrl

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-15_dea3a1c5763c4d99eaaaa50d2962e6a0_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections