General

  • Target

    2024-04-06_f179564c24f0e9f2c1476a7678bbb815_cryptolocker

  • Size

    103KB

  • MD5

    f179564c24f0e9f2c1476a7678bbb815

  • SHA1

    ebdded98c0d8c32c7bac0682ba716be2d5a031a7

  • SHA256

    cbc45c3b24f92b31cf00093b22cefc9224fbe96ce209ccbe7344852e87592f8c

  • SHA512

    361ac9f608d539d20250df4102627456ff6ece68c30e3334f0e53eb4b0f3e67733bced91279ee315c2694f161211bfab639422d3219a7d1832918a2661bb612e

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2eRM+Sj:xj+VGMOtEvwDpjubwQEIiVmkxv/r+Sj

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_f179564c24f0e9f2c1476a7678bbb815_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections