General

  • Target

    2024-04-23_063a6dbdbbfde564b06e4e4e427935e0_cryptolocker

  • Size

    103KB

  • MD5

    063a6dbdbbfde564b06e4e4e427935e0

  • SHA1

    9958bb8c09afc638749acaa121f500a797befd50

  • SHA256

    a7e14ea893009d8d27787b03faff7e9cdfcf4461570d1ad698f4637da1ab8bd5

  • SHA512

    9eb7833018c6e05b4fe9e42c0e30a37e1d255ff9f5bb0019aadd5913bbbabe2a818ed7bef16855dcffc0e08d30512544c5e404628235b916703aecbcb399076b

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJHlv/k2NMeV:xj+VGMOtEvwDpjubwQEIiVmkxv/LV

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-23_063a6dbdbbfde564b06e4e4e427935e0_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections