General

  • Target

    2024-01-18_c241a68a148479d7ed3598203552b369_cryptolocker

  • Size

    64KB

  • MD5

    c241a68a148479d7ed3598203552b369

  • SHA1

    32d0fd632bd99419ebab33bd82586dbca210e9d8

  • SHA256

    c493b2b6a86140557e68fae49bf03aaaf02ecc122f91719088a7548ca682d664

  • SHA512

    fa395352bea08a95cfffc0cb49a84b890af64cf6f680417278d543af9374381e149eb6e4f7d9e17584bfbbe5fcfb0e83b724199d3dd6ca5e0097a83497a60d3f

  • SSDEEP

    384:z0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26JWFpXMYkW0NrD5v6ntOOtEvwDpjqIH:zQz7yVEhs9+8pMJP6ntOOtEvwDpjF

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-18_c241a68a148479d7ed3598203552b369_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections