General

  • Target

    2024-05-25_d6563a016cb43640999eaf46544e6aff_cryptolocker

  • Size

    88KB

  • MD5

    d6563a016cb43640999eaf46544e6aff

  • SHA1

    f0114219c8f1e295c0801eb6a0d0c9ef6015a59a

  • SHA256

    d6ec2df885cdbad1a343c60a8d3b59d75ee59156a9f5ea7ba816c906462b2657

  • SHA512

    4e7a1e734005383f5e8f6b9fc6532ea1f47ae831b153d6ea131aad4c5317e95f625a31ffe085c3210cb1fde9195f48049340856cc77b55fb9bba18ccdd4519d4

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvxpRvoP:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8BoP

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_d6563a016cb43640999eaf46544e6aff_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections