General

  • Target

    2024-05-29_6ac9870860a07a5a928254fbcb18c29a_cryptolocker

  • Size

    52KB

  • MD5

    6ac9870860a07a5a928254fbcb18c29a

  • SHA1

    26a2c9af17d8199034379d38883a09552786f27e

  • SHA256

    163f4efcf5eaf4c7c454c11d2cc4c7794fabb1081f9b1b987db760f109611b10

  • SHA512

    1c899f01803fad1329eba238aefbd29cc27b3ece9ff4447ce1f514ea7a81b6641a61084aacb0ff72ba5bf0bf0c4d3e219fd3204f4bc80308664a499ac50f1b86

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRY+iyyDo:6j+1NMOtEvwDpjr8hhXy+iyyc

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_6ac9870860a07a5a928254fbcb18c29a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections