General

  • Target

    2024-03-26_30c4c3e75b12d968480f55a2d59a1d92_cryptolocker

  • Size

    102KB

  • MD5

    30c4c3e75b12d968480f55a2d59a1d92

  • SHA1

    d1dc217d0f7c44fdfc30a0c7d8a959249c0f6332

  • SHA256

    513f23f69b6747887c063c74f30e28e3d0980938d3a31be7ccc3b13c2a6e5962

  • SHA512

    459fb94078659e31396cab48f23d9a325842c110c397d3d7c573ce3af6e9e5e9d86915e5d0900595d3d4e9f23a8f3dfce1717d0d9719aacf18522bc023f7bf6c

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjzUNu5aT3J:i5nkFGMOtEvwDpjNbwQEIikgNh

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-26_30c4c3e75b12d968480f55a2d59a1d92_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections