General

  • Target

    2024-03-06_c30bad3d60508d29a0b58f50252f5ef1_cryptolocker

  • Size

    81KB

  • MD5

    c30bad3d60508d29a0b58f50252f5ef1

  • SHA1

    8d74b2f2fc531303c31d074bf87c6c7e17ca1947

  • SHA256

    59e1d2be0bceacc754a2bd6645eedf3e7e554735dea85fa6eac792135be7997f

  • SHA512

    2bd7910a84537e94f70b2d5f5125cdfdcc47dc732a9ee3bbab36aa819642a4fcdf878de8a48b467dd60eb2ec7ddf06f0e135df1c30be80fef0cfa2d89b141a9e

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1kyJS13:zCsanOtEvwDpjd

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-06_c30bad3d60508d29a0b58f50252f5ef1_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections