General

  • Target

    2024-04-19_c1f92a6fdfe51fcf04f4cbd8dfa3b7d6_cryptolocker

  • Size

    102KB

  • MD5

    c1f92a6fdfe51fcf04f4cbd8dfa3b7d6

  • SHA1

    5bc1319125cc7b14d6839b63febb973cf2615945

  • SHA256

    5d495b63c7464819844456e7334d4ad0a814bda73461dd58e55b29d61a998c6c

  • SHA512

    4c5fe79c3a7cf7571535067032a3bf26e8643f7f77cbbc7f58aa77ec37cc7861c68df1524f689acc72eb9cff6d114b7ce0b5861804e39fe05e99f0a8126c3097

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2NMeoH:xj+VGMOtEvwDpjubwQEIiVmkxv/LoH

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-19_c1f92a6fdfe51fcf04f4cbd8dfa3b7d6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections