General

  • Target

    2024-03-06_a1d3c2891175bae520ae2ae4e06d68f8_cryptolocker

  • Size

    62KB

  • MD5

    a1d3c2891175bae520ae2ae4e06d68f8

  • SHA1

    6472afadd308a494994a0091c3331d0086b24aa4

  • SHA256

    37ddb8111e9c390dbd20fb79f588fa2eb3e525e2663c852778e58a52066060cd

  • SHA512

    16d38f7964e3c35a6f4a84e4871b10358eafe68601a6971238dd6d49ecafa1db8e8b2bded41fe51e0c31791b39e9eeb35da691f0bc6502de39e91607347b2dd3

  • SSDEEP

    768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mLZ5Sc1:zj+soPSMOtEvwDpj4kpmeLmL1

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-06_a1d3c2891175bae520ae2ae4e06d68f8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections