General

  • Target

    2024-01-18_5fb4d6f7f128a50c9675dc1257136e43_cryptolocker

  • Size

    115KB

  • MD5

    5fb4d6f7f128a50c9675dc1257136e43

  • SHA1

    93e8c78c8df02ffe1622424d2da3c67094830cf5

  • SHA256

    15e4d7c57782190c1e7cbf1d90f7bbd8edac09f5e23f3e469aa589c4080fdc35

  • SHA512

    a36d21d0549b43d05816f2883f33ab246c38161cf5fe25a38718629378b5023b3a17775d491697546cd8ff6370cd685adf13a62104ef25e8c5b6132bd9bda2fc

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjCGYQbN/PKwNgerar/V:T6a+rdOOtEvwDpjLz8

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-18_5fb4d6f7f128a50c9675dc1257136e43_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections