General

  • Target

    2024-03-27_2620ebebcc99a4d24858f69aa67c149e_cryptolocker

  • Size

    87KB

  • MD5

    2620ebebcc99a4d24858f69aa67c149e

  • SHA1

    d44c2a07a6861d019cbf676a41416fee23c9fdef

  • SHA256

    787093c00dd1c96b489ffb2431184271a486d41ecd3f003e337645ed92178280

  • SHA512

    fa6e9ec8064b58b3fb34594969dbb0f7ed4dbadffa6ea5c44df959c01d5b740ba177e2a914b467063e66de6c520ca96a8eca939f7db6d5690ea16beef3b85a87

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvx5/HbAW:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8bAW

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_2620ebebcc99a4d24858f69aa67c149e_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections