General

  • Target

    2024-03-05_d3d782ed3a09560c2662dd7f15cad408_cryptolocker

  • Size

    59KB

  • MD5

    d3d782ed3a09560c2662dd7f15cad408

  • SHA1

    70b7bd869b9fc992dfa0c1f5ac7782b51b6109cc

  • SHA256

    2e2a9cd9760cf67361573dd9b678c4c9232244c2dfc26c134b62068472100c33

  • SHA512

    4ef99480d17073c2b4e169a754dd41e6c9b0ce3e891345240004451bb70e17140b8260a4a815899395e070f3548ee4b17604058fa83a54e0edf1ab6ebec5e6b4

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHNM4:1nK6a+qdOOtEvwDpjK

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-05_d3d782ed3a09560c2662dd7f15cad408_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections