General

  • Target

    2024-04-15_a35057f58e67386d56ca18b1df9f4f77_cryptolocker

  • Size

    101KB

  • MD5

    a35057f58e67386d56ca18b1df9f4f77

  • SHA1

    c14f08ba996bd5f5dc2f1cf4db41be15839bb508

  • SHA256

    6f295bc435aad75ca7ebf468352fb11a444cce719bb3e91cd835d9c59ca07665

  • SHA512

    c576349f6f095ac60dc7421f11cddcda0b6d8c10767a8be4b0e63df7c2250b47bbfbb9c3ab6ec08c09d875fcb8987719bf7e157bab924b5b02fe3fc7043d476e

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2yO3x0:xj+VGMOtEvwDpjubwQEIiVmkxv/uh

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-15_a35057f58e67386d56ca18b1df9f4f77_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections