General

  • Target

    2024-01-28_1f17a6384d690c1f9d6dc88eeab9932a_cryptolocker

  • Size

    80KB

  • MD5

    1f17a6384d690c1f9d6dc88eeab9932a

  • SHA1

    e41474479ad44a573e103eded63b98cd6b985dc1

  • SHA256

    29e229c559683607e13c3f2554907c0c86c8e305d156691cf17483b132f2cc42

  • SHA512

    b8ab52de78cd48a8dab729ff655ba8922ec367bef9174113e61c6e1cc751a994a448a63b9b6ff404b2f29234e9e3af2c811842fa006d9f907d0e87d435fe8c98

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1ky2j:zCsanOtEvwDpjp

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-28_1f17a6384d690c1f9d6dc88eeab9932a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections