General

  • Target

    2024-04-16_58d4aab2a8d8d2f7a39723fd20805c88_cryptolocker

  • Size

    101KB

  • MD5

    58d4aab2a8d8d2f7a39723fd20805c88

  • SHA1

    219c9c9282d633a47b72c48efea9683beb91db6b

  • SHA256

    199bda67f8b0a82119f89dc78272a7fd89a2848e9185ba5dee4107e6d1a917e4

  • SHA512

    d288b81a97f693a161cb3582534bd370159cc3a28b7eed1eb702fd1328f1d51ecff63d26bb3c23c1586022105c20a0163a1370af99e67e7d6ad449c2a1328e4b

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k28JM:xj+VGMOtEvwDpjubwQEIiVmkxv/wu

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-16_58d4aab2a8d8d2f7a39723fd20805c88_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections