General

  • Target

    2024-04-05_b00f3e5f630858c16bcfea51f09f8d3f_cryptolocker

  • Size

    87KB

  • MD5

    b00f3e5f630858c16bcfea51f09f8d3f

  • SHA1

    8aa18f85c4d9d6d9f565db5e8d2fe4bbf861b3f1

  • SHA256

    24f1b7b8682a57fcd9c95919ced11a40c7fd8546eb530de10893bfb69255d9c7

  • SHA512

    d8e40241fd33d82f73f193eb43ce86195f7a1213859a80f9366d934151a324ac9849e4da1693d9eed3382d9656e0ab44656cee543e3fa2ae1b28838a6fb489e2

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvx5/HbA4:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8bA4

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-05_b00f3e5f630858c16bcfea51f09f8d3f_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections