General

  • Target

    2024-05-13_b158fb4d27c30f51169a0b4d168f9bd7_cryptolocker

  • Size

    43KB

  • MD5

    b158fb4d27c30f51169a0b4d168f9bd7

  • SHA1

    a0cc09ea262107b2e8f1b9a587ad56c070036ac7

  • SHA256

    0e924116ca4c9eb597d524c8f408e7554b0db6e9084e7a87462a938142af60a8

  • SHA512

    dfb00447ac3f9e2c4212817cd105bdb18e74e82858bbc11a18a53d325e48c400939ef5db2cb2a39630fd4f0f50a526fe92b404810cfd26d17fa92b827beb0ec8

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMl+r:6j+1NMOtEvwDpjrRru

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-13_b158fb4d27c30f51169a0b4d168f9bd7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections