General

  • Target

    2024-05-09_736899e6729bfb4dd349511f58d2b399_cryptolocker

  • Size

    86KB

  • MD5

    736899e6729bfb4dd349511f58d2b399

  • SHA1

    f292318ec6621d5ccfb0fa8ca37801b6f7bba2fd

  • SHA256

    6532f8020cac9b8d2fcba27d5af9f93bbb356918c25837680f11862c3b9d8cb8

  • SHA512

    bf97a656969dbc7346a8fe5fbf49806307a8a77a25f7e8fcbd196094922b5b80e585fefdc36b38972aa6d75b5bafa9080f6215ecba87cd9cacad06e2f9cc9ced

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvxpR87:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8+7

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-09_736899e6729bfb4dd349511f58d2b399_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections