General

  • Target

    2024-02-18_5eebdafef5f5e0c33bbec006e0900b42_cryptolocker

  • Size

    80KB

  • MD5

    5eebdafef5f5e0c33bbec006e0900b42

  • SHA1

    797f6ad71c20176d65ca68b5fca519c20c68af28

  • SHA256

    0d95dc041aef18dbac49686c238bdef6cc9b34a6618211364e8a5bf7a703a28d

  • SHA512

    8b0837eb3a6022bca9dc5e03020f8d4aa7cac988799e4c934e73b9828ab9e2287c66d84154174f706fa66259f55a93de8a968a57d963c5866e643c34c7f3062d

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyJS1e:zCsanOtEvwDpjo

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-18_5eebdafef5f5e0c33bbec006e0900b42_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections