General

  • Target

    2024-05-09_9116dfb3a5136c3a78711c6e6858f970_cryptolocker

  • Size

    86KB

  • MD5

    9116dfb3a5136c3a78711c6e6858f970

  • SHA1

    a2cab033db6ba7cbf81176499df07bfbe454cc75

  • SHA256

    b9eb983b73c09dd495c0ee30f71f26ed2ed528f07db1ca52ae6bc414b383c0bf

  • SHA512

    7ae059b11db8b023c7e4d56d37a90abec5d3243fade0e8defa998b4584bf3142606270c6dec922d06cf9cc97b308a3cfde9c16dee4be0e768b7869897c9ad63d

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvxpR8q:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8+q

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-09_9116dfb3a5136c3a78711c6e6858f970_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections