General

  • Target

    2024-06-10_af431d1208c32380ea6ea006e5bf0ecf_cryptolocker

  • Size

    89KB

  • MD5

    af431d1208c32380ea6ea006e5bf0ecf

  • SHA1

    ece28582a154b8d9c8d9df316a129806cbcac805

  • SHA256

    2a29fa5726f98f476ffca1e9807c96c902a085c5d46bc405a36d011edcfefd8c

  • SHA512

    8cb3f6804ac99a8a175b7abccc8bb02eabd5502bc6530cb26549bbb70bc49d1c9ae864f3d9fb2549208a4d72e4021a653e15f9599d54a7b872084d7d8bbb74ab

  • SSDEEP

    768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvxpRvR/:i5nkFGMOtEvwDpjNbwQEI8UtzNcO8BR/

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-10_af431d1208c32380ea6ea006e5bf0ecf_cryptolocker
    .exe windows:5 windows x86 arch:x86

    e021c9fc2c12265365fad587d43783fe


    Headers

    Imports

    Sections