General

  • Target

    2024-02-02_3bf94837a9633ae89392c82db2f6eff5_cryptolocker

  • Size

    64KB

  • MD5

    3bf94837a9633ae89392c82db2f6eff5

  • SHA1

    22f2ba1dc98d2450e397b080e1ea25ea358e600a

  • SHA256

    b9ac2a147bb28c35bd6ff9db2d5eaa50e0f5a7149f7eb46a1e710d1d3af80b00

  • SHA512

    b021dfc99e6cc25fbb9dcb4d355ba68053e547c0a619cb7f867062961dd0bfd2e8483662b0bdf9ae4670cebfc68b92a96d8a9120b7f11587646c6f71ab8a6122

  • SSDEEP

    384:z0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26JWFQbYkW0NrD5v6ntOOtEvwDpjqIGa:zQz7yVEhs9+8SJP6ntOOtEvwDpjF

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-02_3bf94837a9633ae89392c82db2f6eff5_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections