General

  • Target

    2024-03-12_fd72ac9dc805f8c56dce8c6e32969b7f_cryptolocker

  • Size

    56KB

  • MD5

    fd72ac9dc805f8c56dce8c6e32969b7f

  • SHA1

    b7de5854f092b9bb091bb364f395e1c3800b79eb

  • SHA256

    dc364a2ae9cf1a5d0ed6cf25eff5fa01efe7aaf6120f6923b5dcbfcbbad1c02e

  • SHA512

    8dccf30f7d616b5f57546405d9d4da852dd422b1647786f94a912993ab83676eeb6439374e3eb4742e5ff40a5b11ba7006735d61729e0c00c858bad105c299ce

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5axcE9G+:z6QFElP6n+gKmddpMOtEvwDpj9aYa59v

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-12_fd72ac9dc805f8c56dce8c6e32969b7f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections