General

  • Target

    2024-04-10_a9ab4408fef0ca06785a8eea7060d5c7_cryptolocker

  • Size

    40KB

  • MD5

    a9ab4408fef0ca06785a8eea7060d5c7

  • SHA1

    0439e5335bf9ed0f2460e55c88d8e3cbf9d9cd7e

  • SHA256

    073a0f2ba78e6e947e4c9eb4a106bbfa27cd5f9a828a5eb24e14ff645a877ca8

  • SHA512

    a526419ad409fb3492fc9c2d001824351bc565c2f40f042eabafcc0ad2092e18fdefdd36a9fccb72b1cf6bf3c1a10c37ca75a6b31aedf1967ef0440cb3db9c9b

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOO3:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/1

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-10_a9ab4408fef0ca06785a8eea7060d5c7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections