General

  • Target

    2024-05-15_d786231bee9dba60d6cb3b8f27fd1c9a_cryptolocker

  • Size

    52KB

  • MD5

    d786231bee9dba60d6cb3b8f27fd1c9a

  • SHA1

    e93a0c62a5135f3e43a15a6df0aeb5c8e2b04548

  • SHA256

    3da8294e677dfa181d8fea5afb564942467b9ba415bb6b0b846aae0789caca5f

  • SHA512

    d2fbb3a2219203cbb13bf1cd52cb9782d3e1115d509bb04ee6960da0b136654df8e8f90e6f0217ce1d4dc58ac9fbca8420cb00cd369197a6123f80efe315a9ff

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRY+iyyl:6j+1NMOtEvwDpjr8hhXy+iyyl

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-15_d786231bee9dba60d6cb3b8f27fd1c9a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections