General

  • Target

    2024-04-27_f39805c1db27500e8f1dd474f0e20bb9_cryptolocker

  • Size

    68KB

  • MD5

    f39805c1db27500e8f1dd474f0e20bb9

  • SHA1

    d1806c33c2063ceda0d84d0d655181cbf9c1a83b

  • SHA256

    ec4a0e7205945b15a6d4c3d89a32cd9a9c63f0fac9f3c384300386ea763b2f0c

  • SHA512

    2168c11c425c0cf1fd9a471ef8073bc4690c6541ceef366e087f1413cd6655c17235b98a06fc9bc68c8cec3dec87aef8a4c30e371895af9f9d55e78b2edf1eff

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFW86:6j+1NMOtEvwDpjr8ox8UDEpN/jW/

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-27_f39805c1db27500e8f1dd474f0e20bb9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections