General

  • Target

    2024-05-09_35316a3b6c3c78a813d23421517e8102_cryptolocker

  • Size

    87KB

  • MD5

    35316a3b6c3c78a813d23421517e8102

  • SHA1

    c29257c2f3017bf378844d5a8ec35b083744b857

  • SHA256

    3a82baf11c987e190129a0179929114306a73e6d57784d72ff7f8261c50d6924

  • SHA512

    2c4b2df780d9b76cc62b5de44510f53c5bde581a873ad1d3c1a1341827749e688fd6d12e8aad858b6a2ba05b194ff17e589a30a1bbb699d2fb89ec3d851a7554

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvxpRv4:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8B4

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-09_35316a3b6c3c78a813d23421517e8102_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections