General

  • Target

    2024-03-06_def1d92c6b11eb8d0ca5b8a370f73cdc_cryptolocker

  • Size

    109KB

  • MD5

    def1d92c6b11eb8d0ca5b8a370f73cdc

  • SHA1

    296a0e3b9c628b848b0dd4b782c241c0d0339d70

  • SHA256

    9254919757c3e1a86b37645bebbdbed38e6d2154d1f1b1dbda8a5c83a3d304ab

  • SHA512

    66d251e5936494c5b25818e1c32820bff333a632d12afbf1bbc9168367223816c541ac946880947e9dd50631d7534fd7acd15e2d0738b433325460ff45f19612

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwMg8l:z6a+CdOOtEvwDpjczw

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-06_def1d92c6b11eb8d0ca5b8a370f73cdc_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections