General

  • Target

    2024-04-19_aa5c8e447f572b531a7ef133cc0a008c_cryptolocker

  • Size

    49KB

  • MD5

    aa5c8e447f572b531a7ef133cc0a008c

  • SHA1

    c22a46d91b66f6007ecb0d159f338fd68d3666a5

  • SHA256

    d257220e0b12d34c1a999f08a5ac4201e8e6d32893782f7af9d8f97b4061d7e0

  • SHA512

    bacd12648ed0e24b87d249059ee52619fccb324619d4c5b576e7f53f16d92edc10bf04245c0355e82b8a2947e885d095b6d1b027b7705337574d5ca349ef583d

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRY+iyHY:6j+1NMOtEvwDpjr8hhXy+iyHY

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-19_aa5c8e447f572b531a7ef133cc0a008c_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections