General

  • Target

    2024-06-01_49f9438930c599dad6cd43e0ec3d748a_cryptolocker

  • Size

    58KB

  • MD5

    49f9438930c599dad6cd43e0ec3d748a

  • SHA1

    a7a38d8079b39bf175e242f513272042a08fcc32

  • SHA256

    4c8084ea88afd04f01bd46e07eae5e9e16d22f0fe434a95a5a57584096ac5439

  • SHA512

    48c63cdd60225c2bf80e7be3d57966357b5439ce25427f93c0e53a7a5c1842fab49ce7f50ad5db752a21d86c5107288b72f0a764d5e804b4c5cd127d1e9737a3

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5QJz7/e64O:6j+1NMOtEvwDpjr8oxExe64O

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-01_49f9438930c599dad6cd43e0ec3d748a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections