General

  • Target

    2024-03-12_482dddf3e09ee00a36ceb4973a6ee24a_cryptolocker

  • Size

    61KB

  • MD5

    482dddf3e09ee00a36ceb4973a6ee24a

  • SHA1

    b9c4cecd52a8334e8b0d3ec1d377e70e26c5a92b

  • SHA256

    4813ca550bd0e7d90f8d605a08a74e69aa84ff98f17e713aefc8ab4a995eb6f9

  • SHA512

    17519fa6a21de5ba9bbbdb9f4b749eab25b0b00d2d890522839fced665777a76cb65176d910dcf66b85eeef261d2cc4722d01ef8d0bc3998b89727571d55b248

  • SSDEEP

    768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mnVM:zj+soPSMOtEvwDpj4kpmeLmni

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_482dddf3e09ee00a36ceb4973a6ee24a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections