General

  • Target

    2024-03-11_b1f32affd4f8478ffa8b92bbd04ae0a8_cryptolocker

  • Size

    91KB

  • MD5

    b1f32affd4f8478ffa8b92bbd04ae0a8

  • SHA1

    7e55abb4224de6b6cea5cfec8b002217361bc9fb

  • SHA256

    b2ee35e940bea8d2fbaa79bbdedbb80f4771d97c8b0d3bb7b460727df6649411

  • SHA512

    d853577f709bac3ec95965e279bba05d188ec1c3d558ff0899efc388c26b43074f2b6db534fe0d5d189907641a01b5052db7022921879d408f5e55292bf2fc34

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjhWGo:zCsanOtEvwDpj9

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-11_b1f32affd4f8478ffa8b92bbd04ae0a8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections