General

  • Target

    2024-05-04_5dc0eb04ce69186a178b8a1c06b4d224_cryptolocker

  • Size

    86KB

  • MD5

    5dc0eb04ce69186a178b8a1c06b4d224

  • SHA1

    9826fa70c7e047ce4083f07e30523642fcf45b03

  • SHA256

    434c810325a3509cc3d81bdb2d3d741492f61fa77556a22bea1009707adf0464

  • SHA512

    8ae49ea7ac591560dea5c45d46be47d3f47374f90fc0643b6d40431793176cf09a003daae6a7a4a23fe24b1d2332d914e7982a7c892101341c2fe098d6d7ab18

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvxpR81:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8+1

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-04_5dc0eb04ce69186a178b8a1c06b4d224_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections