General

  • Target

    2024-01-24_f491f35c271f62a13f12d428d4177a83_cryptolocker

  • Size

    61KB

  • MD5

    f491f35c271f62a13f12d428d4177a83

  • SHA1

    67cfdcdb2e6bcdd9816a434e6a47521ef4acc72b

  • SHA256

    858207c1af60cd1147aaba3b9fbb0b847da55eafa6ea7aeeb6145d03ac026b8a

  • SHA512

    939608a0edbcdfab9b7194e8ff6062693d13c95bfee90f027d96c9e2091ea763125feb8ce3f68dd1904dbd64413747e93b9f7013f863ea8cec36f5b1f51d7d31

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYibAo6e:1nK6a+qdOOtEvwDpj9

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-24_f491f35c271f62a13f12d428d4177a83_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections