General

  • Target

    2024-05-17_d1b42f6e1dd56046c22fcc46357e88a3_cryptolocker

  • Size

    57KB

  • MD5

    d1b42f6e1dd56046c22fcc46357e88a3

  • SHA1

    81efb325c970b1a393aa76fce61debdb5cfe7414

  • SHA256

    1b33fbb7e39c17047526065f391b56e5f1c9d7b519599049171df5ebe22ea279

  • SHA512

    ffa7e69f8aa59430da6f7260159531a59d2ef6857222ca774121811a8ef30487f5c12e92180ab5dbe50a0d69a29bc29d8d67a4645966a8f303ca88c98dafd0ae

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7/e67:6j+1NMOtEvwDpjr8oxExe67

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-17_d1b42f6e1dd56046c22fcc46357e88a3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections