General

  • Target

    2024-05-16_c648b510071b5279a505e3c619b4a519_cryptolocker

  • Size

    61KB

  • MD5

    c648b510071b5279a505e3c619b4a519

  • SHA1

    da669349f7beca8f3acb258fde1f7987083f45d6

  • SHA256

    e25f1dc11bc9fcd30e4c24e08f73dec9f5e3a2bb56915444cbc8722e276a5398

  • SHA512

    b5186cc8c8a7b35b4e75effc419ad61ddcb70d85886386ee2210c029854afebeca0d074d73c9b0d3ff65b22806bba0a645317595ba97ea92f149c70021d2d609

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZgBh8i6g7GoFwDm:xj+VGMOtEvwDpjubEgywS

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-16_c648b510071b5279a505e3c619b4a519_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections