General

  • Target

    2024-01-18_db40b963d408eead6899dc9486154bc6_cryptolocker

  • Size

    47KB

  • MD5

    db40b963d408eead6899dc9486154bc6

  • SHA1

    bb3eaf5295b3bb9856ef86f07a7dd39194a068fc

  • SHA256

    132360d216ee53d9d49910be779888eaae039cf0e066f1d5c5b1bc58bb6e6910

  • SHA512

    f9ba9e8edf5fc07f7839c6ba96fd9a491e800f7924ba8d08d82f022907091d8eff27f6415f87d85ab8ef3a97b39970ab43f22693b5ae4b02a47571d1a2641d94

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05WtyU8jt:qmbhXDmjr5MOtEvwDpj5cDtKkQZQPdUO

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-18_db40b963d408eead6899dc9486154bc6_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections