General

  • Target

    2024-04-24_ef57514094dc550e4971f14a512874f6_cryptolocker

  • Size

    49KB

  • MD5

    ef57514094dc550e4971f14a512874f6

  • SHA1

    9f1ab5b15dc5c3759f75de16053eec58c0fca179

  • SHA256

    1c98aefe75b88a1b6dcb150061c018a28478a70d80695186cce9cf5d79c4d3f3

  • SHA512

    1e5347355e2b00ec5db0b5c48d341dad54631862b599e9b847bce04ff571462c62c507e89da105438a692b07b9edbf51e57a86400d71d47789aae6d16c8842a0

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaN4NOh:xj+VGMOtEvwDpjy+TN46

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-24_ef57514094dc550e4971f14a512874f6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections