| MD5 | aa7679572e465f0a0d308415b5b4ce03 |
| SHA1 | 1ba54ba951dc63ed43c24a9988e6b8f7750d9885 |
| Filename | PowerShell CrytpoLocker.ps1 |
| Domains | [adsyndication.msn.com] [cx.msn.com] [images.adsyndication.msn.com] |
| IP Addresses | [207.46.120.187] [191.234.5.85] [93.184.215.200] |
| Antivirus | [Ransom-Posh] |
| [Ransom:PowerShell/Poshkod.D] | |
| [Win32/Filecoder.CS] |