2024-05-24_ba7cbc1a8dc6e2a58d1d49352df43562_cryptolocker

General

Target
2024-05-24_ba7cbc1a8dc6e2a58d1d49352df43562_cryptolocker
Size 42KB
Sample240524-a2t4rsfa31
SHA256 6983c69fabd76b78e6b89a8216ae75a29fd474ea4ffac5f26e845e6be8bba83f
MD5 ba7cbc1a8dc6e2a58d1d49352df43562
SHA1 926e54204553839cea2822232f0a895835374484
SHA512 575165c068f0cc1655655154c41e86d45a4ce0ed0868e277dd6593e2eb6b3f141ffb6d3f2ceb26d44ac2fd652f07087e69e01897381a76ef837fcfca2dcdeb0d
SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/yYshNhn:i5nkFGMOtEvwDpjR+viHshNB
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-24_ba7cbc1a8dc6e2a58d1d49352df43562_cryptolocker

IMPHASH e021c9fc2c12265365fad587d43783fe
SHA256 6983c69fabd76b78e6b89a8216ae75a29fd474ea4ffac5f26e845e6be8bba83f
MD5 ba7cbc1a8dc6e2a58d1d49352df43562
SHA1 926e54204553839cea2822232f0a895835374484
SHA512 575165c068f0cc1655655154c41e86d45a4ce0ed0868e277dd6593e2eb6b3f141ffb6d3f2ceb26d44ac2fd652f07087e69e01897381a76ef837fcfca2dcdeb0d
SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpj66BLbjG9Rva/yYshNhn:i5nkFGMOtEvwDpjR+viHshNB
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

5

Entry point

41183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths