General

  • Target

    2024-04-28_aa648e88d558a4cfe3479fa01f3b9e4f_cryptolocker

  • Size

    51KB

  • MD5

    aa648e88d558a4cfe3479fa01f3b9e4f

  • SHA1

    7bb0b304866767adf35b8e275b7bdf3fcc06bbc7

  • SHA256

    1c8db3f673dba97d5d358ec6888470e6c0d21bee1c46101e8615fd5d379fd779

  • SHA512

    032585309b63b28ef22ff7954e5566ca12d719e20ca46426b568887c3c57d5a0afe1404d92903f6a7540e89a9d5ee6ae78e30f21bda072798821d77961bcc0d2

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLtldedHkv:xj+VGMOtEvwDpjk/eVkv

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-28_aa648e88d558a4cfe3479fa01f3b9e4f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections