General

  • Target

    2024-03-08_3dac57e63ce4bf71ed9c64ffee34c255_cryptolocker

  • Size

    79KB

  • MD5

    3dac57e63ce4bf71ed9c64ffee34c255

  • SHA1

    68f2080e2bc6910703366ccef95ee0451e0d8983

  • SHA256

    67710bc79ebac7ad9a9146e0883d5d966393cedd699819070956bce7b38c4e8f

  • SHA512

    0b6b7e42487ad993081f14f96155610b4f3f3e729cbfd4ef8c2cf3a1a552add063f5a037aa39878dbff9f90967f804a90503c833f157df7fe52c9f540be3434a

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdphO:T6a+rdOOtEvwDpjNtM

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_3dac57e63ce4bf71ed9c64ffee34c255_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections