General

  • Target

    2024-03-19_f6cf1a2e1a29226f63ff63d259a12ba8_cryptolocker

  • Size

    106KB

  • MD5

    f6cf1a2e1a29226f63ff63d259a12ba8

  • SHA1

    13d510938723a1381c2a6ae2ae1e68c25e3cf697

  • SHA256

    5a78656cdc259f42283531db980098446c12d9b5603c1763fadd815facac24f0

  • SHA512

    15c64d51093bf92948d3660b5b7f92e1b86c1db7065b65b2fc284479c421570b0f1c7a044c2c9304405b836ccf536bfea4ea1dc54e9758ad7c515db5b36bd093

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWjy9LYj:xj+VGMOtEvwDpjubwQEIikuLC

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-19_f6cf1a2e1a29226f63ff63d259a12ba8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections