General

  • Target

    2024-03-09_306a852875a1fd5f1bb912fd9a7d6833_cryptolocker

  • Size

    71KB

  • MD5

    306a852875a1fd5f1bb912fd9a7d6833

  • SHA1

    1c6d9dcf89be529aca0e0bd816404d3bf52c3a7e

  • SHA256

    75c843fd7d754d8d6e16ee6c0f82012faaf1d6164beb9faf5e6e40f0933f3247

  • SHA512

    062ea2f51974e3666f9952c1c577149beed4e95aa905d38d9db8b9237bab390d8c458fabbab9bb99574100af0707ab1c714b84784ff345eb945b2c88d3f44e9f

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalPE:1nK6a+qdOOtEvwDpjt

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-09_306a852875a1fd5f1bb912fd9a7d6833_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections