General

  • Target

    2024-04-08_2dc636cbc77ec6d53da796db8a79f0d5_cryptolocker

  • Size

    98KB

  • MD5

    2dc636cbc77ec6d53da796db8a79f0d5

  • SHA1

    c39a0734f83c2eeeffaa3abe3e79ef2768f542d5

  • SHA256

    05de18e21d343b72d29a946c53dbcc0ccbc6b2e6ed8ad0de22799b7abd912844

  • SHA512

    18703394d570497c9c90117d9fb3f5d5dda8e2d74640dbf1c50e8d8ab58da3ccf4ee0c9546847d571d31baa57ed609c75177ead8ca2ef7402dbb749bf9fc4c2f

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJvfT3XaF5BXW:xj+VGMOtEvwDpjubwQEIiVmkfXmBm

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-08_2dc636cbc77ec6d53da796db8a79f0d5_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections