General

  • Target

    2024-05-29_3d8d9957a5049194514d03b987dfd42d_cryptolocker

  • Size

    42KB

  • MD5

    3d8d9957a5049194514d03b987dfd42d

  • SHA1

    0a03add85fca438a63452fde940dcd53c801682d

  • SHA256

    66b7cdfa6608912638c3ee9d08e11487ff7cf34c889542e755e32e7337b4f945

  • SHA512

    73f85225f33196bec0ddf56304142be28795148270ae7c6222ef305d18718bdb45799b88b9e86f2cf425de14cb04cd689ef3e8382e74e52c2d34c1f53f4af39b

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnY1n9lM:m5nkFNMOtEvwDpjG8hgpY19K

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_3d8d9957a5049194514d03b987dfd42d_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections