General

  • Target

    2024-05-04_3c7fc6e71f16f213efc514cb51781a8d_cryptolocker

  • Size

    86KB

  • MD5

    3c7fc6e71f16f213efc514cb51781a8d

  • SHA1

    cd2d45a8c42fdb8769932dc6751a562d701ff32c

  • SHA256

    ccf735e38ddd4b5954b501ed774f567e8a60858668cbedee48aab06dddf01c11

  • SHA512

    ba83c0739bb5dbe14ac39f59914202a128156e60e2eac3b321c89ba985dbffda2ce6c04270c63eb53e249e27458e1be1c56be0f3beecd06eba4a57ee1c6deb33

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvxpR8k:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8+k

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-04_3c7fc6e71f16f213efc514cb51781a8d_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections