General

  • Target

    2024-03-07_bc6273a648728331f960ea1635737666_cryptolocker

  • Size

    55KB

  • MD5

    bc6273a648728331f960ea1635737666

  • SHA1

    9ac1333fee50907e2237119019be30949f1d9eba

  • SHA256

    2b893f26fc3c2f4d6665a736d7c42e351ae484a6e0750d7b18683bccb052fb9f

  • SHA512

    b492b798c59b70b3138073b08454ddf16f25cff3ce50d36495817d3a36c17a1f317052ae3327767153f54e022e6e392fbab996cfe3ec825a3c69304b1cdb0961

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5ax8X2:z6QFElP6n+gKmddpMOtEvwDpj9aYav

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-07_bc6273a648728331f960ea1635737666_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections