General

  • Target

    2024-04-06_81e065681824a8a2f9c2e80c0f4260f7_cryptolocker

  • Size

    46KB

  • MD5

    81e065681824a8a2f9c2e80c0f4260f7

  • SHA1

    0a4f63a3b2f0d879372f50c9a46c7479625ccb11

  • SHA256

    baaf223df327fb2e1044e21575ca040f165440bcbb0788e472942775fc9c5f04

  • SHA512

    b4d1a116e7e5b3c9f99008f8e8eeae34258b8e473d458042dd93918492a995b2efaaefea47a000f83ebbb428fa28941736df5bc448729d5cdbdc136c9979c9b6

  • SSDEEP

    384:icX+ni9VCr5nQI021q4VQBqURYp055TOtOOtEvwDpjqIGR/hHi7/OlI0G/Bdmem3:XS5nQJ24LR1bytOOtEvwDpjNbP/bmX3

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_81e065681824a8a2f9c2e80c0f4260f7_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections