General

  • Target

    2024-05-29_be580623e216ab871e83a1aa598e1287_cryptolocker

  • Size

    96KB

  • MD5

    be580623e216ab871e83a1aa598e1287

  • SHA1

    61040b239db32f232dddce5afea1f06344547831

  • SHA256

    1f94a5b6945fb5ac0797611a98170032401839602724c3915b0389d41777b180

  • SHA512

    11cd572e69cb36bfc44b83c13049cd202cc0ee6c9536c7199969c8fd378bf896112d653ffd025d8a2db6de9b0f479bf51a809b48c06a76139cb40cc2b1971429

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAc0:xj+VGMOtEvwDpjubwQEI8UtzNcO8Ac0

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_be580623e216ab871e83a1aa598e1287_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections