General

  • Target

    2024-04-22_ff4b8e128648cb7a26390d8ff73def6b_cryptolocker

  • Size

    38KB

  • MD5

    ff4b8e128648cb7a26390d8ff73def6b

  • SHA1

    540b66265db1bcae3cb4c1abac49911382b786eb

  • SHA256

    c1d006524d96434cb1a5b7958ad9ee80fbde3e00f9756ffbd86f28af6d39a66f

  • SHA512

    b6d301d1c4ece3ca600a047fe00f07a88cc26680271ba46d5616fe85df55aa387e28ad364e34e6302d9d618769a3e60da9e5a9c4ecf2c39893e2d8d1476307e5

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnv00Gx/:m5nkFNMOtEvwDpjG8h00Gx/

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-22_ff4b8e128648cb7a26390d8ff73def6b_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections