General

  • Target

    2024-03-08_112e771adeb0af7062f625ed03d5d9a3_cryptolocker

  • Size

    79KB

  • MD5

    112e771adeb0af7062f625ed03d5d9a3

  • SHA1

    bf41d61c59e7fa61288e3e05c06bac40e7703194

  • SHA256

    c22e2d9c0b30678c9746fa4bee542dc1b835bfaa462a9260ef11bc866620e88a

  • SHA512

    1f2894572f0419c289abad31b9b99932914756aaeb2862d434b5836aa44af657e7c311f6e6638c32dccf7ca0cbe3f5b7f1be96579e4d64c68bb9c8709395743b

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1ky7QpU:zCsanOtEvwDpja

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_112e771adeb0af7062f625ed03d5d9a3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections