General

  • Target

    2024-03-08_dddd6d065ec23f449f58b8681fe93ea8_cryptolocker

  • Size

    71KB

  • MD5

    dddd6d065ec23f449f58b8681fe93ea8

  • SHA1

    f210b8a505c9662b2203731c848f4f4ff8b4f458

  • SHA256

    45f8cd37c2ae76dd70a36028370218f6e71e9d7ebedff0e170ebeaedba6d64d2

  • SHA512

    347cf1d90f261e763eafdc3fc1abdc5bdec56f3815b135fbdbab3899d28b28b00e7054a1b0d37c746dd850fab83d49bb7c45fc96898fae835840413910db3b25

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalVx:1nK6a+qdOOtEvwDpje

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_dddd6d065ec23f449f58b8681fe93ea8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections