General

  • Target

    2024-04-18_72f3158e0f485938bcb8854cd3138672_cryptolocker

  • Size

    88KB

  • MD5

    72f3158e0f485938bcb8854cd3138672

  • SHA1

    7b96d6a2d726c46007b8501bc31fa8adcc5641e6

  • SHA256

    dfa52d50f924ad72a95f674e549f59b0d4a3c0e9af487853a51693b2f474a69a

  • SHA512

    ca65ab6118fa66de996edefb18c252452896de8f98bbb090d81e16ae2d771e6b9557061dcfe04fb74257e6d8bddbd62ef66aeff7341b8061ab7107a71b0f2deb

  • SSDEEP

    1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAAK:n6a+1SEOtEvwDpjYYvQd2PB

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-18_72f3158e0f485938bcb8854cd3138672_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections