General

  • Target

    2024-05-03_a8105ec15214470643eeab5f591c32b8_cryptolocker

  • Size

    50KB

  • MD5

    a8105ec15214470643eeab5f591c32b8

  • SHA1

    42766f484fba52bcedf2309da432b7c9d1295dd8

  • SHA256

    0bd36a2148c7266232b8c8bf87ffe02bfea2cceca62d0ba12a502419a0531df0

  • SHA512

    c6a6dfaf6da541ff93edb21697b86b1fbba41dfb65cdbe37628393b7dd4c2d5edbcfabc01d7d6106fdbe44250b48d5f305da9742052e3030b8dee875d08b31ca

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLtldedHs:xj+VGMOtEvwDpjk/eVs

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-03_a8105ec15214470643eeab5f591c32b8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections