General

  • Target

    2024-04-04_5316da84525fb99871312aefc6e12a48_cryptolocker

  • Size

    50KB

  • MD5

    5316da84525fb99871312aefc6e12a48

  • SHA1

    cb3bc23285302af090a9764de257b7600bbb1c4a

  • SHA256

    66f0498daaef21691d7db3a7754c5c00d224dfab8b385e380f96e1033065e761

  • SHA512

    0c778b05aa5454073a2f823ace03dd6449c0c6b56017f94109bfd33df8010ab12a1b0bfe9841011f32865adab43f5e000bbf2d43ab0f1da5dfc3fafe82c1dfa8

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwacS:xj+VGMOtEvwDpjy+TcS

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-04_5316da84525fb99871312aefc6e12a48_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections