General

  • Target

    2024-04-27_0d739e722a08d92f7a1fecb60f54d351_cryptolocker

  • Size

    41KB

  • MD5

    0d739e722a08d92f7a1fecb60f54d351

  • SHA1

    8bfb306c5eae46d39f90f81cdb11df6f90a0485d

  • SHA256

    1aa9463fb8bd2c1974d9dd3a1c728a3e405a5037ed395db50493ed9948f15faa

  • SHA512

    70162c495ed1ad7f13f9ef41e281538135f0096c176269fed1d53bd085bf184fc80011d1b1597106ed352d39c1b2285bf647fc0fb806f7e3bb055fb34e5f0dc6

  • SSDEEP

    384:60VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26aIIcVRYpetOOtEvwDpjqIGRmdHzOOB:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/z

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-27_0d739e722a08d92f7a1fecb60f54d351_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections