General

  • Target

    2024-01-25_3489dda3478cb34b4024cd4376e0c9c8_cryptolocker

  • Size

    59KB

  • MD5

    3489dda3478cb34b4024cd4376e0c9c8

  • SHA1

    df5e26acfbb1fa0d1fa4a49593a578d393c18688

  • SHA256

    43df89f3436e4539a5ec30aada203fa03c7897877c27b18eab987f056fcb039b

  • SHA512

    10f900511459e90f6b63130b293ed0ae09b20f573b3cb3c408edd114c4d3a6e20f3dc9e793dfccf047e5a46f85a003a78ff78133e2e14a42965f0399bb1e18b8

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj9aYaFAuz:z6a+CdOOtEvwDpjQR

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-25_3489dda3478cb34b4024cd4376e0c9c8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections