General

  • Target

    2024-04-29_bedd8d8d3969b2c8c68db19ba77c59c2_cryptolocker

  • Size

    44KB

  • MD5

    bedd8d8d3969b2c8c68db19ba77c59c2

  • SHA1

    340748c11a59f681a6f4b24c84d75c5f0abe4a7e

  • SHA256

    b6e5e20d991c02330f60a6f66f6101deb01f152fe87151e410f529242fdb5030

  • SHA512

    d70df5fd48c572298e463d50c6a494821ca419d1a7d5783311bfd73e8793aadef35b88db67d799e58105651ef10a4729d57e42a8cae49f5664a74e9fa1ed351b

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFRp5jp:m5nkFNMOtEvwDpjG8hhXj51

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_bedd8d8d3969b2c8c68db19ba77c59c2_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections