General

  • Target

    2024-01-28_d879a20396e19919bb17dc68661b5e54_cryptolocker

  • Size

    62KB

  • MD5

    d879a20396e19919bb17dc68661b5e54

  • SHA1

    154480b4d8c30cb257598bbccee2f1bf0d46e4ea

  • SHA256

    e6fa9a997b701cb648a172a0f42cd9ebd9c75e78f2aaa0dc0322da90b5a4f4f4

  • SHA512

    d06770d71b5c2260e6e4ed211e97b97e1ca17929e2dc85fbc3ffdd18f84735a72ab815bb629920f77bee30aa4494519bf7ba64bfd2a30f6fe5453b82a2733633

  • SSDEEP

    768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mLZ5kJ75:zj+soPSMOtEvwDpj4kpmeLmQl5

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_d879a20396e19919bb17dc68661b5e54_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections