General

  • Target

    2024-05-22_ef29eec03e194942892863a026a6f57d_cryptolocker

  • Size

    79KB

  • MD5

    ef29eec03e194942892863a026a6f57d

  • SHA1

    89f7dfcd5a1b016aa36fa1af7c9617d5e0813ca3

  • SHA256

    fe4093e0e4d091043abcc46617d68d2cd983295d5c7c24b2b2eee1ca41b0a477

  • SHA512

    c947666bbd56ff01d4b3a3b40f1f3b158fe2a5b75cb19e0c746939bc3015812c96d7a973f43ed566c1f7907c0a002d591a7eca5decce47ecf8ccb1680f363571

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdJcRk:T6a+rdOOtEvwDpjNtp

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-22_ef29eec03e194942892863a026a6f57d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections