General

  • Target

    2024-05-08_d73d32fa1a9490a0fc1a5988260dff5c_cryptolocker

  • Size

    50KB

  • MD5

    d73d32fa1a9490a0fc1a5988260dff5c

  • SHA1

    b35d971e7b06cba85b2d8a0950850c36d4939fea

  • SHA256

    eb8d4e5306174a91c8429280c31e4a57de94d6f78df5be4b17518a78adacf13b

  • SHA512

    06ee54c8530279a2b112e15345b8048ba9aa585fc50d82b10af55620e2f70cc79acb10e174bd15d0f26641243fd57379bf648b9cdd8501f3d50e5c9fc7b779d0

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoccM:qmbhXDmjr5MOtEvwDpj5cDtKkQZQG

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-08_d73d32fa1a9490a0fc1a5988260dff5c_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections