General

  • Target

    2024-05-04_a1fa80b3e9f6d4a6675eafdb1d8f4e91_cryptolocker

  • Size

    86KB

  • MD5

    a1fa80b3e9f6d4a6675eafdb1d8f4e91

  • SHA1

    49a25313ae8c4622e3d2b65341cd6f7e57caed5f

  • SHA256

    66a97222141a398b4d183bcb1f9218a90418e8be5691bced791d9c88d94d0db6

  • SHA512

    fa5f44c63e122eec16874fd18a0fe28447f8a2955b44f25bb77e99bace6d06861e1bff3519b7a17cacbae05b401ef6c5f25a3e130264065e6579f45fc3055558

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvxpR8r:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8+r

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-04_a1fa80b3e9f6d4a6675eafdb1d8f4e91_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections