General

  • Target

    2024-03-12_6bd49da2c723d1b2c1e0e0d055d5d902_cryptolocker

  • Size

    115KB

  • MD5

    6bd49da2c723d1b2c1e0e0d055d5d902

  • SHA1

    c1d99ded27de020bfc28108ba8e14cc84fe141d0

  • SHA256

    d6176922cc90e7ecb1132be1b1ff99be632974aa32bc2bc236cd1b2015873925

  • SHA512

    5feb4bc62c31e2e434ab0c1fcf9d8b104046c338f81dcaadda5340c5a3cc6a771db543b8f495044c958f3fbc44d92d1cc74646cd65e95c3e4d889fe878a4d51d

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjCGYQbN/PKwNgerar/7:T6a+rdOOtEvwDpjLzO

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_6bd49da2c723d1b2c1e0e0d055d5d902_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections