General

  • Target

    2024-03-18_04270834cbf1b6b3b689b3f5488480a8_cryptolocker

  • Size

    101KB

  • MD5

    04270834cbf1b6b3b689b3f5488480a8

  • SHA1

    cacb188cdfd8e2441dc5f87324e6b7a0e567e5c4

  • SHA256

    9481dace67d5638764548891a5f87bc1c2e0aa6e9a88f05f69c47d4e65f9e2ef

  • SHA512

    31dae802a269026443ef4106953bf173b0837664a2fb96270fcece9c46f962867e4b048f8a2023bd1cedac5b560bf31f8e98e7e76c827a8244ffd4aa1a420ce0

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjzUNu5aT39:i5nkFGMOtEvwDpjNbwQEIikgN1

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-18_04270834cbf1b6b3b689b3f5488480a8_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections