General

  • Target

    2024-03-26_bef0b1db98bfbbced0a48320aeb0baad_cryptolocker

  • Size

    105KB

  • MD5

    bef0b1db98bfbbced0a48320aeb0baad

  • SHA1

    0ee20e7bb65ff7ce9608c6d5a5649dd3d68022c3

  • SHA256

    debb2961e825f57b3c2ef706a24a9618bb7df2a8b1a455870c6e5e0d435cd5d6

  • SHA512

    b305d9f2e6732161b90a449900084bea897e894e1846fa9889de9e4fe03494077daf271cb8ba6522013439263629ae89767061c6ed5a4fc459f698f2bbac1fca

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6GksP:1nK6a+qdOOtEvwDpjP

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-26_bef0b1db98bfbbced0a48320aeb0baad_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections