General

  • Target

    2024-01-19_b1384a67ca228a6c5a7e4e03e4ac4a65_cryptolocker

  • Size

    55KB

  • MD5

    b1384a67ca228a6c5a7e4e03e4ac4a65

  • SHA1

    5bc61bef411d2830c8574e2c8b3831d8cb180094

  • SHA256

    8d1a7658ec5e73fd635a5a58f21c0930fad067ac443bb7c513a5bcdc368f856a

  • SHA512

    051b7562aa61ffbe8395e7d5abd5cd88363342f9699b314628f4b1be12be88cda562bae8529fb792a2ae37721996e5bc45b9d14adac4d657b4b901ba8514bc38

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5app1:z6QFElP6n+gKmddpMOtEvwDpj9aYal

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-19_b1384a67ca228a6c5a7e4e03e4ac4a65_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections