General

  • Target

    2024-02-20_29960e9efe279f9b3a15eb7e2a5ef9fc_cryptolocker

  • Size

    83KB

  • MD5

    29960e9efe279f9b3a15eb7e2a5ef9fc

  • SHA1

    43f68580e20c0b0a9feba2047ebe2dc121a7c85b

  • SHA256

    0e5f7d414ca57358afba6c4166fff36dc849b01775ddcf08418797c1e68840ea

  • SHA512

    2e5731efb46d584d2542d1a4e5ea42f243d6c805ef18b23976c8cef6e55a520cd00d35492388f3e1ddd192fcd2d780e183644b8b4b6dd9a1a87ac03154a85152

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyJS1U:zCsanOtEvwDpjK

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-20_29960e9efe279f9b3a15eb7e2a5ef9fc_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections