General

  • Target

    2024-02-24_fdefce487ae1089a80131a5699fc403f_cryptolocker

  • Size

    81KB

  • MD5

    fdefce487ae1089a80131a5699fc403f

  • SHA1

    ab3164603a4f1314548eb9ce673cfb62fdff19a1

  • SHA256

    f6cf7538997ce13203ea85d44df402e999f196ae673555c3498006569e2ee732

  • SHA512

    06eda8446cdb0938871791f293a5478049587c933ce12111c55fe164f39874b011d4de44031c66388e6b988acd17cbe921e558fd8e6e765b7106ef746d0415cc

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdWZz:T6a+rdOOtEvwDpjNt6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-24_fdefce487ae1089a80131a5699fc403f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections