General

  • Target

    2024-04-09_ffd9acdf38a2cc44414e8dc84c8415dd_cryptolocker

  • Size

    95KB

  • MD5

    ffd9acdf38a2cc44414e8dc84c8415dd

  • SHA1

    f87a90bdff7718f2144b3feaa965bbc979562bc1

  • SHA256

    7924acac9f0c361ac1cecb7b3e423a04ef69fc48eb2e917a9b94c6bb5d8e6376

  • SHA512

    c8c6f12ff46122acda0ae4fdeac862e06457cf505143e407fc69b2a1d300330e16ec0dc88189e0c383455b39f6b8c31f9786d6c5933cb43f72cea6f55e9dce48

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJvj81:xj+VGMOtEvwDpjubwQEIiVmkPk

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-09_ffd9acdf38a2cc44414e8dc84c8415dd_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections