General

  • Target

    2024-03-28_a17872f0f1dbe4b0f36ee3c2bedebdfa_cryptolocker

  • Size

    101KB

  • MD5

    a17872f0f1dbe4b0f36ee3c2bedebdfa

  • SHA1

    5b8559875fb6806276a49a1c129eb7981883f953

  • SHA256

    0bcc97ee917af5ef2993ca6efd1343f03a1f1e286fa71229fe807f1b0ac72222

  • SHA512

    f662322a50180e15d8e54455f96953561a8c76705aef718803e837c457369077823a5ceefd468c0647d40ac744f1df25619a1a1b4b37e877686f200b100afae0

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2yO3xgD:xj+VGMOtEvwDpjubwQEIiVmkxv/uB

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_a17872f0f1dbe4b0f36ee3c2bedebdfa_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections