General

  • Target

    2024-05-24_ff1a1d0641f7e5aa14dc86f2d9bb19e4_cryptolocker

  • Size

    56KB

  • MD5

    ff1a1d0641f7e5aa14dc86f2d9bb19e4

  • SHA1

    4a5a62db499ac4a5019b306d7d263df17f845ff0

  • SHA256

    826f1cbba4ee591356497c67efdab8bdee19c3539b2e897290225a9ebe39df84

  • SHA512

    6fdbfedfada09df42fbe3540faeeca39eeb1af5f613b1a3146bd5abc39083cab01f5f5e597542e98f20c98fe9a558db75b02c653caf6bcee8ad5c3645470deab

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7/e6Q:6j+1NMOtEvwDpjr8oxExe6Q

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_ff1a1d0641f7e5aa14dc86f2d9bb19e4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections