General

  • Target

    2024-05-15_12ba81161809879d3868996a678d95b8_cryptolocker

  • Size

    68KB

  • MD5

    12ba81161809879d3868996a678d95b8

  • SHA1

    c251bc034563a1d69c2a6cb27f920e0efd22542b

  • SHA256

    2ebf805e6531ae4cfa86f4d80b64178343466b7f773cbe9ca3a9bd790572e882

  • SHA512

    2c6c1a3ed1607221dde1ff04a9b973a28ddc27bc75e4d5cc5fd6a86dc523b43228ddd0148a3df02fd244ee7a8718a6644b3eea28760b1d7092b0ab04249abeb9

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/d1:i5nkFGMOtEvwDpjNbwQEI8UZDv

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-15_12ba81161809879d3868996a678d95b8_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections