General

  • Target

    2024-04-08_196cb25837b7a259c7d426bb71d28e8f_cryptolocker

  • Size

    103KB

  • MD5

    196cb25837b7a259c7d426bb71d28e8f

  • SHA1

    f75d8c7524865b570f8552dccb47a75dfa50c686

  • SHA256

    9681ca3c3e39893916d9b73188f21dc28cdcf3ca07b9ef57815eb847066ef93a

  • SHA512

    0a4148271b518265b12a95ead13d8848ec946624740ab86dbee0c5cda6ab62dafa71b43ef30db7a7a55d91ecd7e92bf0a5bac02604e0d252b02c4d2d2c23c645

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2eRM+SB:xj+VGMOtEvwDpjubwQEIiVmkxv/r+SB

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-08_196cb25837b7a259c7d426bb71d28e8f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections