General

  • Target

    2024-03-08_6cb749bf665146022f9aeae43468b614_cryptolocker

  • Size

    61KB

  • MD5

    6cb749bf665146022f9aeae43468b614

  • SHA1

    b5768947c41015bc88fee05e3c6d05e49ae89397

  • SHA256

    c8d0c07e8208512b08f7d0f16d86c2b1b890e9bafc38b906b60906ba4dff2238

  • SHA512

    642da2125696cfaae4c8a61c800bedebc853152f3a07bbe73c621333aeebff50b2a1abed4e5e714d63baab5d1bc60c59b734f98c70fe70c79d05b1119c8d8a4a

  • SSDEEP

    768:T6LsoEEeegiZPvEhHSG+gkum/kLyMro2GtOOtEvwDpjhXMLamkc8J59+wC:T6QFElP6n+gxmddpMOtEvwDpjwa397C

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_6cb749bf665146022f9aeae43468b614_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections