General

  • Target

    2024-06-13_3f1251949bfa817ab459ae4bdf30cc6a_cryptolocker

  • Size

    44KB

  • MD5

    3f1251949bfa817ab459ae4bdf30cc6a

  • SHA1

    ebab41ca49e750f6d03c77ad1845cc333ca10d46

  • SHA256

    bdcf1394162472c742100c5164c0ef391343c0fbaf72f103953cf7bf16e9a961

  • SHA512

    0a7b5fe463145b78087ff629f5abfbde1972a35268d750389e405eba6b1c05aa8fec491ed4cef345fd49f91592c1a13e4cd83c9e30dace0ec58a0b959ec929df

  • SSDEEP

    768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabM0S:6j+1NMOtEvwDpjrR2XabMd

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • Detects executables built or packed with MPress PE compressor 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-13_3f1251949bfa817ab459ae4bdf30cc6a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections