General

  • Target

    2024-05-29_f0a8582a28e7956d7895daf16a7d52f9_cryptolocker

  • Size

    42KB

  • MD5

    f0a8582a28e7956d7895daf16a7d52f9

  • SHA1

    7f3be203a04d518e328b65d894d883a36a9f387a

  • SHA256

    6adb067f12338e49264d96edfb214c07cfdbeaca0e58f56a29b3816673dafa30

  • SHA512

    931fa3c6e22689c29e40ffaf1da0568d4d512ebce6183687b9922476dfe9ece7cdbee74d56578a383a9f920ea5f8b3f92f22605d5662914cb8d1ef327bf25b64

  • SSDEEP

    768:TS5nQJ24LR7tOOtEvwDpjGqPhqlcnvgpnY1n9v:m5nkFNMOtEvwDpjG8hgpY19v

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_f0a8582a28e7956d7895daf16a7d52f9_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections