General

  • Target

    2024-03-28_fecfef61a9f06349f57081a6216de632_cryptolocker

  • Size

    102KB

  • MD5

    fecfef61a9f06349f57081a6216de632

  • SHA1

    9de0fbb25c4d93445bcedc6c4472ac43058e0df4

  • SHA256

    17dc3dd64dc0b1d76e4dfc865a0f6796aa01950dd484a3b937ae8e0a70a02ab9

  • SHA512

    86ca2fd99c8cdfddade6218049f64e42d472ed8632303ffcc27049598717329ffecf654181a3470ded740cc62f3fabe899fe63f74460e3d559b23e815658db2b

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2mwVeza:xj+VGMOtEvwDpjubwQEIiVmkxv/Ce

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_fecfef61a9f06349f57081a6216de632_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections