General

  • Target

    2024-04-06_dfacf8e68933f3ace14693df3f2679d2_cryptolocker

  • Size

    61KB

  • MD5

    dfacf8e68933f3ace14693df3f2679d2

  • SHA1

    f69dcedd044060ca2a9e90e62bc96ed8dc98f875

  • SHA256

    6db6440fec31aca0dc7b55f459e3988548f90539c87ab131a904a49fd6724ba3

  • SHA512

    ab4b563ea79fbddd18071a83d7220f5c3cbd94708e8d9a8acfefea9f2261580a5fee3f586de74db6865367f045e176bcc534cfeacd99c830146444cb79b46cc6

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEO10K9v:6j+1NMOtEvwDpjr8ox8UDEy0K9v

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_dfacf8e68933f3ace14693df3f2679d2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections