General

  • Target

    2024-04-30_b368a0d749f3d183b49d80b1ef1a8bdd_cryptolocker

  • Size

    103KB

  • MD5

    b368a0d749f3d183b49d80b1ef1a8bdd

  • SHA1

    e971c57519fd76b0042ae56b09776fabbfc1dd96

  • SHA256

    d07c78c8b7d19199c30b5d93eab0ad0c435c2b74d61dd300aa442dae6195f407

  • SHA512

    727ed6f44ff4cb1a1f2cf2d8b519a9101ca847cfba3830db68be06c6e14e144e7b3cdbdd2a3e5e71dea642bcf126b0d58c39daa3a37485f7d25eed636d27ea06

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRiWjzUNu5e/7:i5nkFGMOtEvwDpjNbwQEIikgNZ7

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-30_b368a0d749f3d183b49d80b1ef1a8bdd_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections