General

  • Target

    2024-03-08_c9849e5812a6d6ca64b04dfc66aec4c5_cryptolocker

  • Size

    98KB

  • MD5

    c9849e5812a6d6ca64b04dfc66aec4c5

  • SHA1

    07efc6d442e1930b750f833b3397488d320cebb5

  • SHA256

    56a72ecd09900e7eed6bb6fca677420cadd5c3a9a75e3fe39afcdee82ed95db4

  • SHA512

    081a00bd617e3ab989b53a34c619c68652d60ea52207358ae27cb59ed6f12a119173943c7f922cb8f5bc97e51283e50de6390cbc860ff912c31fe5156a4db4f7

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbbr/BKib:z6a+CdOOtEvwDpjcP

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_c9849e5812a6d6ca64b04dfc66aec4c5_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections