General

  • Target

    2024-04-24_d13642f5e8b97bb2aa1ee1cc3bd35c7e_cryptolocker

  • Size

    67KB

  • MD5

    d13642f5e8b97bb2aa1ee1cc3bd35c7e

  • SHA1

    adedbb4cf15a889e6b52879a67f3fd69a1437385

  • SHA256

    65aaf4499c57879f81b60560457690fc061c8d16c7df5fd8b6a78dbe1f429f8c

  • SHA512

    89515a83fb5af5359aa07c38131b6695137ff1d691a1a5f5319d6bf63929bd2340fa453a29cdf0792e966ff4c5895e0864275b7a9e4809df824ecb9e64f25bb6

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFW8O:6j+1NMOtEvwDpjr8ox8UDEpN/jWz

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-24_d13642f5e8b97bb2aa1ee1cc3bd35c7e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections