General

  • Target

    2024-04-18_fb13bc8df959bbdd26e0e4361fcbb39f_cryptolocker

  • Size

    87KB

  • MD5

    fb13bc8df959bbdd26e0e4361fcbb39f

  • SHA1

    604f49dab501ed3ea86b1edeb1d43368efdb6cbc

  • SHA256

    4d3b4d5d1de0644b8f335f4873ef840167f528d1062eea3482e418665fb7b8f4

  • SHA512

    9a63c0604bc8585318d427049e3c596f8eef5ead79163ab7b782e6df5e68c0ca0335d291c5482c098b98e64ee1781d18546a1fc85513ab1d0d9265e04112a9b6

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvxpRvl:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8Bl

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-18_fb13bc8df959bbdd26e0e4361fcbb39f_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections