General

  • Target

    2024-03-19_313bb0f8c5accc995fe6849962f0aef7_cryptolocker

  • Size

    74KB

  • MD5

    313bb0f8c5accc995fe6849962f0aef7

  • SHA1

    ff6fd29cff3cb25806757547acc598564d80bcab

  • SHA256

    bb34470d2895e8ecae223c39d221da0d4b32b7ca81964f062138c0a4957e7f78

  • SHA512

    f4b8eca6557722d48aa28ca3a6fb1ba412ea25acb9e5761921bd40c5d0bc58901db0a5e5843c02aeb6b97c172094f1e980a7b444f54d364c417a10b9b5bc98f0

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUPn:xj+VGMOtEvwDpjubwQEI8UPn

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-19_313bb0f8c5accc995fe6849962f0aef7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections