General

  • Target

    2024-05-26_fd47664a1a3951b8eab4d2f82c5d12fa_cryptolocker

  • Size

    96KB

  • MD5

    fd47664a1a3951b8eab4d2f82c5d12fa

  • SHA1

    63f84e6a96ec037edb779dddb1544d00d51c18fe

  • SHA256

    8a19963bc478e299ddba603f212a1de8e78a581589dcacd656f44de22a1f65a2

  • SHA512

    d2b60f09343d0ed0d1894796a6c3bed742bf98ac96411e3033b79b1f0837904dbc7905da457835b1f7da85d9a9909a5eb247dd4d37ba55f2badc0a3cb6dd0d13

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJyqdm:xj+VGMOtEvwDpjubwQEIiVmkuqQ

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-26_fd47664a1a3951b8eab4d2f82c5d12fa_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections