General

  • Target

    2024-04-16_b0878b5b7691db11bd5bf580dbef60d5_cryptolocker

  • Size

    40KB

  • MD5

    b0878b5b7691db11bd5bf580dbef60d5

  • SHA1

    c28ce0ce41d71812fa178fbca198aac3ed33872f

  • SHA256

    f41799319d42a71042b8e55a9c3fd9215f263a5ca3c82633849a708c8ba778c0

  • SHA512

    47fe9a0f812897cf7d54cf413facaced0de0dcfcb048c101dc0d8adb303174e29ba9a158ac872a81992ae7a1e7e8aebebeb2249badebab9e85bc093f6d0baad1

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/yYs7:i5nkFGMOtEvwDpjR+viHs7

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_b0878b5b7691db11bd5bf580dbef60d5_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections