General

  • Target

    2024-04-30_b67eff0db418a6406d55ccd840d5f562_cryptolocker

  • Size

    43KB

  • MD5

    b67eff0db418a6406d55ccd840d5f562

  • SHA1

    f476d7bf0f75489703b14405cc73c8e88f80e732

  • SHA256

    6a3dd728154f4b2ec7405696c7d9fb630a9b87cd3ebedd944d0889af1cf88d8f

  • SHA512

    8ea4a3e9c173211d92edf3f4bbb538f6d78dd238d46b07c0bda68818003493c130db36c672b9fccff3d10a8af572d917b48a49da017ffa745b3bc5fee68a750d

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvhx5/xFRp5j+:m5nkFNMOtEvwDpjG8hhXj5K

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-30_b67eff0db418a6406d55ccd840d5f562_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections