General

  • Target

    2024-03-16_e1685c6c611f82ea12d9636203599fc1_cryptolocker

  • Size

    107KB

  • MD5

    e1685c6c611f82ea12d9636203599fc1

  • SHA1

    bd07cc0eba800a39c60280119d0c46a021e4a3c7

  • SHA256

    fc08c11cd40cf33193e73484bdb41c2db64ed18a3ebe4a28bcd582c8dfde152c

  • SHA512

    133501a5c6919497f62fd4e4c5027ec89ef35ae550151ecc22b649a9f4b28de1688fabcc01d26e6fc0dd4640d366b29f318582565214f5d577f4a743bd606bde

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6GksaH:1nK6a+qdOOtEvwDpjS

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-16_e1685c6c611f82ea12d9636203599fc1_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections