General

  • Target

    2024-01-24_fdb2d1278a936f28f3b1764808a34f38_cryptolocker

  • Size

    67KB

  • MD5

    fdb2d1278a936f28f3b1764808a34f38

  • SHA1

    b06824a85a020168f24f6b89df72671f94c669bb

  • SHA256

    38a6685ee7aae1542b934af9ccd08f2f60475b5581900f01825e2e5691895ceb

  • SHA512

    7e9f8bc4df28ef0e92bcaaafe9beebff20c1d4be155d1c7f4e3f21ded969169d5054b2e8885bd407223a10107ca4e002e8fba96aacd73e147c6b13b221450584

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj9aYaFAeBa:z6a+CdOOtEvwDpjQM

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-24_fdb2d1278a936f28f3b1764808a34f38_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections