General

  • Target

    2024-03-18_c6471a9033e8896b463b58962064161d_cryptolocker

  • Size

    41KB

  • MD5

    c6471a9033e8896b463b58962064161d

  • SHA1

    752de8836318b5fbac76483ce74574f9dff89fcb

  • SHA256

    b3c94ffbf1b6aa6f0abad66c476c86b781c207718f75fc26fc6e31e533ec8b85

  • SHA512

    d3116c2e3c144d6777a5173be6737f4e019bda4c331b4409c7daabf40cdd973ff7c6a2e2133c1a13b7d7425db853a9d23600d0d01b295fd5c47dfc96e617ac22

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOO+:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/g

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-18_c6471a9033e8896b463b58962064161d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections