General

  • Target

    2024-04-09_0d354dba9c3235a098cd479cd60d858d_cryptolocker

  • Size

    147KB

  • MD5

    0d354dba9c3235a098cd479cd60d858d

  • SHA1

    33f26a6e08e35fd20b2b24df7812240a54fe2a4c

  • SHA256

    3411b54cdcd0eb29e952db402498f879c732c3be3c098ba0abba5363998fc23a

  • SHA512

    275bb5f93d4642e42066134cfed8e0bea966ff6ba19179782ac3714cd1158782080595d1f6de3e3ee48ccf9a5a0de4c00bdb51666f613a9b650eb53f5ed319a9

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp699GNtL1eB:z6a+CdOOtEvwDpjczr

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-09_0d354dba9c3235a098cd479cd60d858d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections