General

  • Target

    2024-02-13_a79564f60b9cba9e83b8db71d0e6a4df_cryptolocker

  • Size

    61KB

  • MD5

    a79564f60b9cba9e83b8db71d0e6a4df

  • SHA1

    9a6da1cf9f489c0959e58423e46c543ba0478342

  • SHA256

    54f4e2bc10c3989f89616746483f2dab673da332b0856ef05349dd0021748e7d

  • SHA512

    d6d797bfe0849004c6959f6b498aacc93af5c6e7f75243c22b1c90a57cbf603f7da33c70bdcaee7799da8e0cee77b7a597a177e095174c555acc8a4dda0f2893

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY7DP:1nK6a+qdOOtEvwDpjw

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-13_a79564f60b9cba9e83b8db71d0e6a4df_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections