General

  • Target

    2024-04-11_c12388d6df5021ebc950a6007bb7d0a3_cryptolocker

  • Size

    109KB

  • MD5

    c12388d6df5021ebc950a6007bb7d0a3

  • SHA1

    fece5f2212907fd899355ef72a10c0d0e82a8517

  • SHA256

    0a6f21f74b37d83d73c61c6e95c92d5a9de7445efe310a3636cec69c3866ca17

  • SHA512

    d6201f8ca39e2b4746a8c802741a0fc68f2bbc72451e1829b3235a0cde2b8d362e4d10e672ee2bb28157b1df3ef164226335c37702222d3ea6c81ee9bc911ed6

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWjzUNoSQn:xj+VGMOtEvwDpjubwQEIikgNC

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-11_c12388d6df5021ebc950a6007bb7d0a3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections