General

  • Target

    2024-05-28_0fa0571a31bdb84153833cf7776a2d5b_cryptolocker

  • Size

    68KB

  • MD5

    0fa0571a31bdb84153833cf7776a2d5b

  • SHA1

    89b58424fde4cbed64318ca045f2cd7381a71817

  • SHA256

    173ed8d974c67568665c17145bc6677c32b989816a0f543ac1134a3f0dc43af6

  • SHA512

    3514798063c71f8447719219c2d71b04a20b490aa66b1bbdb50e71b288c6a4be3ca255b5dd1a9c307ebc2db603f5e166026d99e3df0d52aebd8e1c120c8914e6

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFI4:6j+1NMOtEvwDpjr8ox8UDEpN/j9

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-28_0fa0571a31bdb84153833cf7776a2d5b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections