General

  • Target

    2024-01-18_0104cf828ff6c9b72a580e80b98ce8f3_cryptolocker

  • Size

    61KB

  • MD5

    0104cf828ff6c9b72a580e80b98ce8f3

  • SHA1

    67cc442441db525d8bfd14492c4ce7db21526343

  • SHA256

    dc2b6e1e84efe1a8e5a302d20a3b906a41a0b8e108529103ade8d9fb3acb0caf

  • SHA512

    ea70ae4d27e5cd57f321eaac7e3620de8a88473742929a476869a3abb0a0260187599145b8794b13ab981473529695d7ac2e4521ea4b1b5a6a18f99ad285b28e

  • SSDEEP

    768:T6LsoEEeegiZPvEhHSG+gkum/kLyMro2GtOOtEvwDpjhXMLamkc8J5hRXi:T6QFElP6n+gxmddpMOtEvwDpjwa3ni

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-18_0104cf828ff6c9b72a580e80b98ce8f3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections