General

  • Target

    2024-03-14_c27b56689768a265fce32f5068c756e2_cryptolocker

  • Size

    75KB

  • MD5

    c27b56689768a265fce32f5068c756e2

  • SHA1

    f89584233c72a3f1be66aa91238a47a208f3770c

  • SHA256

    66dcc3b93e0a47885e7aceedb12fffe1d0b02bebe02d2b530ffb4de73e233411

  • SHA512

    afd2fdf7c8e3c23c39a499fcc0e33b831db9f9cb1217b1b5a915bdffdee95a014f0080a7fabca7ce2700c00b9f6d83089c6f8b442b515504a9476f789600f3e1

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdJcRi:T6a+rdOOtEvwDpjNtD

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-14_c27b56689768a265fce32f5068c756e2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections