General

  • Target

    2024-03-18_a17d2e3542f89b6f7bc8c41945764308_cryptolocker

  • Size

    40KB

  • MD5

    a17d2e3542f89b6f7bc8c41945764308

  • SHA1

    8cb9feee7eb79adc4247e9219fd92f4183b50685

  • SHA256

    46aab96cf853b0b35f89fbaaf1dd564dc3ee57efe013e58cf03e3c1a07eb3d87

  • SHA512

    471bd1bf9fee9c2fdb5df6b88561236593b52fc60f37182a66d56c7e53c1ff89878e228c2a65d456da63a9f790e26723521d9b563825acc8f32ef9df2fbb1d6d

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFRve:m5nkFNMOtEvwDpjG8hhX9e

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-18_a17d2e3542f89b6f7bc8c41945764308_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections