General

  • Target

    2024-05-31_1bbc9a6d305469ed3201f00c4892e32f_cryptolocker

  • Size

    97KB

  • MD5

    1bbc9a6d305469ed3201f00c4892e32f

  • SHA1

    13e0029c11d501af7c3024205358a5b9079da493

  • SHA256

    28a11f23c5045fd42ecdc3d8477f071f4919c32b2308ff17383987d9f720117f

  • SHA512

    1fecb25abbeb78d3721b69aa3f5b1650fd588807ba2adc2d5d9e578de8cfdbdd9a97faed0b9a50c9f74fee577c57d088631024b936ffc0687b5b43c0e19fc577

  • SSDEEP

    768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJyqdx:xj+VGMOtEvwDpjubwQEIiVmkuqb

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_1bbc9a6d305469ed3201f00c4892e32f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections