General

  • Target

    2024-02-17_bf8b888e1b7c9393cfd84bfc22a48ab7_cryptolocker

  • Size

    109KB

  • MD5

    bf8b888e1b7c9393cfd84bfc22a48ab7

  • SHA1

    ecdc9ba85884ad33f6f6a70fd64dba9ff79db629

  • SHA256

    82a0c25618d7ebb74eb75796862aab990b255512be591118f05004d14cd2fb8c

  • SHA512

    9155c0648d232fba8cc77873320878063577c27c96afb6d6e5e12c76f33acfb70dc0460e3caa21d651a5fb49d3e9e38f0ba04ddc8fd80b29fc3aeeb5331565ef

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwMg6Z:z6a+CdOOtEvwDpjczG

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-17_bf8b888e1b7c9393cfd84bfc22a48ab7_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections