General

  • Target

    2024-03-08_bba6ba28f515c61c6302cfe524fa638a_cryptolocker

  • Size

    44KB

  • MD5

    bba6ba28f515c61c6302cfe524fa638a

  • SHA1

    0ab714947a51e38cae9b25875007ea6753bf8b24

  • SHA256

    fdc9e69a8dace303ccd8f9b760832cc3aa89a71b5a95d0fde28655be24c7a52b

  • SHA512

    24f456cd70baf82401aea8c8b884bdfee2803a6cd1262a5019ccf46ab0438fce1905a61f10c5041c7221fc6e9ac0afdc42fb8dcc67d6378fd944433f212ae279

  • SSDEEP

    768:qmOKYQDf5XdrDmjr5tOOtEvwDpjAajFEitQbDmoSQCVUBJUkQqAHBIG05W2MoG:qmbhXDmjr5MOtEvwDpj5cDtKkQZQ0

Score
10/10

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_bba6ba28f515c61c6302cfe524fa638a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections