General

  • Target

    2024-05-10_d363ea66299eda55255b58dd53ec4597_cryptolocker

  • Size

    96KB

  • MD5

    d363ea66299eda55255b58dd53ec4597

  • SHA1

    3db531619a8302d02a4546e57483a12bc884119a

  • SHA256

    af7473a2ec1743ea07fe61f24b20cb013d202fb126c416d47a698f1e3f4089ac

  • SHA512

    617aaaa997992c7c9e9642a1304bfb76d47c4efbece508e585ff948d3357b1b9fd1139667d8ce401e28afc93366664955727c3f1c45adc6d6a8541d64c8ed7c7

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAc+:xj+VGMOtEvwDpjubwQEI8UtzNcO8Ac+

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-10_d363ea66299eda55255b58dd53ec4597_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections