General

  • Target

    2024-05-23_dd9658f475d6f97598dcf4d9bd6b75c4_cryptolocker

  • Size

    91KB

  • MD5

    dd9658f475d6f97598dcf4d9bd6b75c4

  • SHA1

    1422aa31ed92c1107dc64c1733727eaed16d7702

  • SHA256

    1f0e6c9d962fea02f3d537aa999e50389bb9e6120c7b80b458f6ed81dc31971f

  • SHA512

    76c9650329275d16ef3b574206c446994278a42639968f35963357d6c95bec786e25af6e8fae1998918bddb02f19f19dcd5013271b685e8ccdc52aa6162c234e

  • SSDEEP

    1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAA/D6:n6a+1SEOtEvwDpjYYvQd2P9

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_dd9658f475d6f97598dcf4d9bd6b75c4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections