General

  • Target

    2024-04-06_a1013108dc536b85e13cc845a27e109f_cryptolocker

  • Size

    74KB

  • MD5

    a1013108dc536b85e13cc845a27e109f

  • SHA1

    9ecad543a21a8d685f5558b397daefda71d1b03d

  • SHA256

    d5eaa704c1de2afbf34e7d3e9869ba8939fd473395d3a8b66c4d12378fe1406d

  • SHA512

    114ed9631df4a9d74b6186107a8e3c4e18e9f6159808e278c9f003f2b04fc42a6b411b23e6082cd0f92773288c9e9ba7599b8a99ae4b9f096e6c3dd6be1df882

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUwN8yys:xj+VGMOtEvwDpjubwQEI8U48yN

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_a1013108dc536b85e13cc845a27e109f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections