General

  • Target

    2024-03-19_85524d6c037a5e36df32d3b1a3cc394d_cryptolocker

  • Size

    100KB

  • MD5

    85524d6c037a5e36df32d3b1a3cc394d

  • SHA1

    3bf537b6a7a706cddb679264af0e0315f1f83108

  • SHA256

    3485cea34d1db4a768ac065911727b0de02d656cb01a39c108c1fd367d0f159e

  • SHA512

    38424124400931f05cf850b98e20fd6c76d6f9728bf418d8895aacfaafff2ad01380972eb0ef1cbf17350f6bbb2f2e3020bea34a579818484f200acfd9750297

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2OYUU:xj+VGMOtEvwDpjubwQEIiVmkxv/CYUU

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-19_85524d6c037a5e36df32d3b1a3cc394d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections