General

  • Target

    2024-05-09_f0118547a5503735a54bb1e57e16c42d_cryptolocker

  • Size

    41KB

  • MD5

    f0118547a5503735a54bb1e57e16c42d

  • SHA1

    8d66c1575c2f14f001b5ba88a4ec8413eaf6e3b7

  • SHA256

    2e12c74c7be5516687fa41b50fa766f29f475e3c998c8cd283a0f01ff9ea9fa8

  • SHA512

    38e5be84f9ea7e7c0f63b2dba2219c04605ad545cec5003ab9860e4b55a1ae2857fcc34ce31b441290aa139d61f3715df7965add0dff4fe95f5308c235f3dae6

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/yYsZRO:i5nkFGMOtEvwDpjR+viHsm

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-09_f0118547a5503735a54bb1e57e16c42d_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections