General

  • Target

    2024-03-08_ef8c9ad8fdf127198fd0f29c9d0ffab5_cryptolocker

  • Size

    64KB

  • MD5

    ef8c9ad8fdf127198fd0f29c9d0ffab5

  • SHA1

    a16fddd385c9a3886e174f48ebdad42b455a7cae

  • SHA256

    5879e732263a582e8848394f60231012f89440af091930bd4b3109ab1b4e8a79

  • SHA512

    f208dd62331a3b0f39c4b04322300d8d7c0b61652cefabc2dbd8629892c55d2be4095cc58c8d7b7aee2dac733bd0a2ebf81d6e3668917af10f9a71c5a52f3457

  • SSDEEP

    768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mLZ5K7Sn:zj+soPSMOtEvwDpj4kpmeLmBn

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_ef8c9ad8fdf127198fd0f29c9d0ffab5_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections