General

  • Target

    2024-05-08_fc16ef99d5823ed58d018f56d12d0579_cryptolocker

  • Size

    95KB

  • MD5

    fc16ef99d5823ed58d018f56d12d0579

  • SHA1

    2d39e3be4a497f57b24cdb6f66d95683d141dac8

  • SHA256

    63ba8e30ff142595580225c7770ac6da7b60f3e0f19fda61d2351828c6ec4556

  • SHA512

    f61815081a2c0d4a66ae57f83aa44973c11b1c97e5c392e9cc3951c81f116535aee0902c9197385a29a817713c7b2dbe97858afa79168bab3e3c39bc90fcba54

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJyqdr:xj+VGMOtEvwDpjubwQEIiVmkuqx

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-08_fc16ef99d5823ed58d018f56d12d0579_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections