General

  • Target

    2024-03-16_c485db7d7585e1438dc6734abe31cbd3_cryptolocker

  • Size

    108KB

  • MD5

    c485db7d7585e1438dc6734abe31cbd3

  • SHA1

    a0406c52456f13ec5912729f352b907eb74a9959

  • SHA256

    eecaef3c8034c8077e60768e60c7a3b25b0fda8011b29d2d360d55ff038f26f0

  • SHA512

    bac8981d6478d29c7cb671a0d670348c6aa27b803492c6bcf1e8c659821f84fa83bdaabd27bc782db57307084deff0d30ebcc1d2c0b0e2b660685fcc563c38ba

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6Gkszf8Vt:1nK6a+qdOOtEvwDpjY

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-16_c485db7d7585e1438dc6734abe31cbd3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections