General

  • Target

    2024-02-13_84c6e3e48005a04b7f39b4e49ece3250_cryptolocker

  • Size

    108KB

  • MD5

    84c6e3e48005a04b7f39b4e49ece3250

  • SHA1

    21fef50371765c5463dc5ede2506392bb46d5cf3

  • SHA256

    2dd1917ae02873e23624c87acb092bd74069c8f411d605cd25ddf8e673ad8220

  • SHA512

    e00781d9e633eac59c854dda3e873a4348c5bbcc0c5787c9a64b8516100be15484f74bbfb0762823a86e4d5283d13169122d5a7bc1594a8ab361f01f82b23604

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6GksgEno:1nK6a+qdOOtEvwDpjS

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-13_84c6e3e48005a04b7f39b4e49ece3250_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections