General

  • Target

    2024-02-23_79bc6dc08cdbc5a5d1cfe9c54a3fc06b_cryptolocker

  • Size

    116KB

  • MD5

    79bc6dc08cdbc5a5d1cfe9c54a3fc06b

  • SHA1

    8997388e88f1ec4d3876f28b752a7eee2293a72d

  • SHA256

    87358b1914d3010c3951cc4424ed7505817771078357641d4f387a529e9ac676

  • SHA512

    b6c65378e984efe2aa6334e96b4d90fe3d74b1b888ccecf35306e32e8d940a17fc226e93bb4443cb427fa1ef152b169490402c66d8af39e8d80be65f19e0bec0

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjCGYQbN/PKwNLX99:T6a+rdOOtEvwDpjLzR

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-23_79bc6dc08cdbc5a5d1cfe9c54a3fc06b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections