General

  • Target

    2024-04-27_49e78f91659e01ed2e5a99833bd3283a_cryptolocker

  • Size

    88KB

  • MD5

    49e78f91659e01ed2e5a99833bd3283a

  • SHA1

    45e9eba9daf5b907d2a3cd813fa03f5e40e95c06

  • SHA256

    04820b8e81980171c3a03e899dc09129e06c399fab0c0f2f41ab5f115b45d52c

  • SHA512

    3da5913b06092354a9bc169988609f72a915632338c097e0a05694e841f6040ddc17714ac29c86741745088582a9ee5e830545f4dd76e28f262b5508a20d9844

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAc5:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8Ac5

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-27_49e78f91659e01ed2e5a99833bd3283a_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections