General

  • Target

    2024-04-27_a1efb9a715022dda1b7b1d5c61f90d69_cryptolocker

  • Size

    86KB

  • MD5

    a1efb9a715022dda1b7b1d5c61f90d69

  • SHA1

    b38b85ae83bcc36bbbeee1dfba81d4e391fb3caa

  • SHA256

    32a1a85b75d17fcf39cb22b4feb6595a85a32e55ea934b273881f08d69c090b6

  • SHA512

    244bab0855d8f418322ab74bb73cf564ffd5a71c56b8918f8f8c1fe094bd70e3f0595abc5a71d39ea9d0ddc0ed9567110e5b6cdb594d183bc8eca318c16c1f9f

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvP29yWXa:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8eXa

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-27_a1efb9a715022dda1b7b1d5c61f90d69_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections