General

  • Target

    2024-05-29_ef2384d44b13e4aa963fd4a32be00c3a_cryptolocker

  • Size

    49KB

  • MD5

    ef2384d44b13e4aa963fd4a32be00c3a

  • SHA1

    37384dbddb6ba61d5fad301bebdb66320099dc7c

  • SHA256

    8a2d029fda545c713d25afe402d6be68d6ee8a378a9f7ef28e3d870e0e7ca898

  • SHA512

    4da29d318f92c06185f9a35fe4b8a16f783868591cfc8036c44c2b93264c2583908ffc764822e056798c8314dbe2b1dc3d6e070358e864813b78f4c8bde95a08

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9Rva/yYsm06MP:xj+VGMOtEvwDpjy+viHs7pP

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_ef2384d44b13e4aa963fd4a32be00c3a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections