General

  • Target

    2024-01-28_611252c1e3991a2b0a67bf4b6a7ebe70_cryptolocker

  • Size

    68KB

  • MD5

    611252c1e3991a2b0a67bf4b6a7ebe70

  • SHA1

    25ad10eb66bb1a2cd32f0aaf86b5b2db766ba576

  • SHA256

    a0f3623871afbcb120759b1824c4fbeb0e9f9400f5eea4d24036de94a9cc6837

  • SHA512

    79b2cd22456af7bdf549a3e93c0c601e50e942c718bf53a2782a82edee754ab724c417a28cf92e1711943ccbdcb68c34cf0ac4a9498c8097c294121690ef1144

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj9aYaFAvCbDa6J8:z6a+CdOOtEvwDpjQHe

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_611252c1e3991a2b0a67bf4b6a7ebe70_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections