General

  • Target

    2024-01-24_895cfa6ffedfcc32a6c980b60c17f344_cryptolocker

  • Size

    105KB

  • MD5

    895cfa6ffedfcc32a6c980b60c17f344

  • SHA1

    a408a2975f1e866edab5fecb72a2edc38adb8002

  • SHA256

    b17303de897a8595b31c3036cdc379f77aca72b05dab13cb379a72afa283bd7b

  • SHA512

    c11511a4638fe78f9db60b9619bead32b3dd5e5a3f3793eb5d693c045f62edab3ff71ffb2632b24a2c1be6fdb804fe4d38c2e0f7f2da3c62d46cbc9d5f439f22

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6GksY:1nK6a+qdOOtEvwDpjY

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-24_895cfa6ffedfcc32a6c980b60c17f344_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections