General

  • Target

    2024-03-25_482dc731b8907bd921fb0c4388409aa4_cryptolocker

  • Size

    149KB

  • MD5

    482dc731b8907bd921fb0c4388409aa4

  • SHA1

    d43834e994c5172455dae6cb1c7c2ce7853da818

  • SHA256

    be7190dcd4d3b1a2f8054f655c9fb3859f257b2f7b29558adf2c61d2daf2e8c9

  • SHA512

    0bb6b265a02df17edf66a3c2638eeeffea0604ccadf918123706086d3019c59d5aea907ef79123416dc4ca475ffc443e3ca6c52a08a2dfe923152c193a8e6e93

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp699GNtL1emn:z6a+CdOOtEvwDpjczQ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-25_482dc731b8907bd921fb0c4388409aa4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections