General

  • Target

    2024-03-27_ded9d58564b7c72f736a78d6bae4cf13_cryptolocker

  • Size

    48KB

  • MD5

    ded9d58564b7c72f736a78d6bae4cf13

  • SHA1

    6da78f20d33e485dd5005ff0eefad6327c614590

  • SHA256

    8b3b58748bc0c51047ca11a947f642b201962d95c113e7ebd7f8a02c3619f7ff

  • SHA512

    5e891a04c1ad5105c364b142cddfafd041b84806f4feda846277ab7fcadec9b69684d9c4f107ba6605dbbe38c2d03a2708d2e100aa200e1c633b981fd52e6c4d

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRp9wS:6j+1NMOtEvwDpjr8hhXz7

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_ded9d58564b7c72f736a78d6bae4cf13_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections