General

  • Target

    2024-03-28_617bbce294ac143f76ab5a13735fac42_cryptolocker

  • Size

    98KB

  • MD5

    617bbce294ac143f76ab5a13735fac42

  • SHA1

    db231e7b91982c3a47708ae118df6509d733e263

  • SHA256

    b0f4525a48155e10b02cea4c40c75b810a815c02b6591e71366a5816eb1b76ac

  • SHA512

    18231eca7ff7206e1ef11e6782aaeb06e63d8b0b0390d06a3bc51d77645be74bca9790085d6b4cd4ea42a896dda1b892d12ec313dd2ca0c190d323e5f8eb4fa8

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbbr/BKiu:z6a+CdOOtEvwDpjcy

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_617bbce294ac143f76ab5a13735fac42_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections