General

  • Target

    2024-04-15_ef59239b0f0376be02c5211a54c98f0a_cryptolocker

  • Size

    49KB

  • MD5

    ef59239b0f0376be02c5211a54c98f0a

  • SHA1

    7ae3ea5383daf6a3c60d1d13a3115db2ef8b4080

  • SHA256

    0941b49edc44e2d1e2f935978c5231d6e7083383e4c83c77c9971dcf4157164f

  • SHA512

    714a6d9036b7241d64a1398c1ff767f1145658c0a58cac67f6f423659dce42ec70a7a212ff52edb354f787f9925ea55f9e5852d0e20c26e22e717ce7eec34a83

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRHn7eAo:6j+1NMOtEvwDpjr8hhX9Jo

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-15_ef59239b0f0376be02c5211a54c98f0a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections