General

  • Target

    2024-04-10_312dac7c82a6ad6f78235b85afa64a13_cryptolocker

  • Size

    86KB

  • MD5

    312dac7c82a6ad6f78235b85afa64a13

  • SHA1

    266c6b7130822008fff3a3a40d953843c3ca3dbc

  • SHA256

    523650aaa9ecb35066e29123964f62da0e1fc2fb26676cc3203fa58ee86d7475

  • SHA512

    81f6d2c3a60a2cf1226c69ae9bb965c4e753e8b319ab20cba8a2cb4db357730b638f30e556c627ccbb7d19a224a080b32ab755fc61a019365543f57d341d3aab

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvxpRv0:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8B0

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-10_312dac7c82a6ad6f78235b85afa64a13_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections