General

  • Target

    2024-05-13_d4704a6152c8daa55087ed17c1c7e98d_cryptolocker

  • Size

    67KB

  • MD5

    d4704a6152c8daa55087ed17c1c7e98d

  • SHA1

    134130e117f874dc7f1fc5a868b77362ae85fabd

  • SHA256

    4ea69b9b7e115c7210b079732d2e3f1adca50a275c540e963b1e63fec3064bed

  • SHA512

    ad437bbbadead38eed7afdcd7360614147437cd9f7d9b3610b93aa5df1d7120b9682e18e64d58a0873b9a6f6266b25ce7ba3e74d35e96a1a896d2c349140d5aa

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFI4:6j+1NMOtEvwDpjr8ox8UDEpN/jV

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-13_d4704a6152c8daa55087ed17c1c7e98d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections