General

  • Target

    2024-03-25_4bbbaf0f6a8a603e9916ea2acd1c93ec_cryptolocker

  • Size

    100KB

  • MD5

    4bbbaf0f6a8a603e9916ea2acd1c93ec

  • SHA1

    2aa096f5b5499660d7005c9d852168581e2f99c9

  • SHA256

    b8913424eed858b134dd44687f4422dbfb6874df8a20bc439bdef9655545d2e1

  • SHA512

    a4ed613b5552772668800c05a4bee21cbaf05cdfd622b399e5fa515a86089a483ccc810bd0e21cf166d1b4db8d34e47973bdcdada982e57f06419ddb5735af8b

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjzUNlp:i5nkFGMOtEvwDpjNbwQEIikgNlp

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-25_4bbbaf0f6a8a603e9916ea2acd1c93ec_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections