General

  • Target

    2024-03-28_f3932aeb5938a6267e940b699add0c94_cryptolocker

  • Size

    40KB

  • MD5

    f3932aeb5938a6267e940b699add0c94

  • SHA1

    2502e338723c01c3b49730a7884fa2914a6f140a

  • SHA256

    c6ac95065b7de56ac0d54ef0ff47cbdcda3fe30556437f1a9b67d4cbb4619ca6

  • SHA512

    b40e4b03635f77f7131a031d219e0a807b4d0ac15a97b5042478e1fc3c0f6eb683fb37ee084efd6caa395bff58415c6fe4f5cb5cbd9b06563bee9d0ebd9c9d18

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnGCC:m5nkFNMOtEvwDpjG8hgpm

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_f3932aeb5938a6267e940b699add0c94_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections