General

  • Target

    2024-03-07_d94f805a8494f11e9bca2a48a0b98a0f_cryptolocker

  • Size

    57KB

  • MD5

    d94f805a8494f11e9bca2a48a0b98a0f

  • SHA1

    a422e0f88260da23ba32e0526342b6f36e49103e

  • SHA256

    b1bd9bbae7949b7fac62e73dead7d58383dbce46d0d33e9f9abe5bfef82ca418

  • SHA512

    c84a9b1b28397ba492c6e32ba3c2837424bcae438ed8fb7d5df4769c1096cdfcca00dff4c95466422f76ac454db509fe42cd5869a81831b8c176df4571c3eb71

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5appU:z6QFElP6n+gKmddpMOtEvwDpj9aYak

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_d94f805a8494f11e9bca2a48a0b98a0f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections