General

  • Target

    2024-01-28_b6ef160703c0cf12eb24560d1f5bb8aa_cryptolocker

  • Size

    82KB

  • MD5

    b6ef160703c0cf12eb24560d1f5bb8aa

  • SHA1

    518cc2c4147a72c7338f27e6953440a29425e77a

  • SHA256

    411fd5288d5bd7d27c5f8d92814086e74e4cffe924c2847844d46d73ab3a0ee2

  • SHA512

    4a48f672ce6a7eac3d1f4e0599dbb5ba9b9e5392d428b1f7f7970fabbd914a33f4629e50c284a074eddfc57b8039e52451f51528683d6e5b301f9a02c12d99ff

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyJS1h:zCsanOtEvwDpj7

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_b6ef160703c0cf12eb24560d1f5bb8aa_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections