General

  • Target

    2024-04-16_1bb528a3253918dc2413c123ec7538d1_cryptolocker

  • Size

    41KB

  • MD5

    1bb528a3253918dc2413c123ec7538d1

  • SHA1

    d2bd4a36aacb622d134d9d041df73f9248b49886

  • SHA256

    a41993601034220ede0439f6251c761b4ab53d620da0a377b731f490b081112c

  • SHA512

    1e266af7b3cf9f64153426bddd2cbdaae8a641cf8c870b26a943e1338695117183459e28adbeabef1edefea268249fbae49b95bada1b730fee00502e491f3c5f

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOl:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/3

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_1bb528a3253918dc2413c123ec7538d1_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections