General

  • Target

    2024-04-25_f0f49a4db2513d75e67476a0cd71e84a_cryptolocker

  • Size

    50KB

  • MD5

    f0f49a4db2513d75e67476a0cd71e84a

  • SHA1

    ea320b498b3877ed899e1cb6abbbc2d6279db208

  • SHA256

    117b156b1c5d84e64b3f995f84f15d9d549a48812a36ad542031f3e850e2a03f

  • SHA512

    9e5306f3de3772ddb5308bf45f599a9eb1f3e4b17e24d2283089e0ae3c3aa277302a151b70ed4dd35601eee24b1505466f0e6944114662767ded9689da895ec8

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLtldedHo:xj+VGMOtEvwDpjk/eVo

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-25_f0f49a4db2513d75e67476a0cd71e84a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections