General

  • Target

    2024-03-13_f58ea52060a33d50e6875834487057a2_cryptolocker

  • Size

    107KB

  • MD5

    f58ea52060a33d50e6875834487057a2

  • SHA1

    a0a2967b70520bea1189ae31647494558dc9f0f8

  • SHA256

    a79908b9d6440a1c2b19bd8cf60b0463906a1adb5ff55bd7f1d9b85146ea76fb

  • SHA512

    dc3cd253adaf2bd2139a225d60d9734afb4f02876cb41a362c97cce38715a8b7e56d460868be4e089931abc2d05a4c83eda99415dda5fc3793301fb99bb12715

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6Gkszfhk:1nK6a+qdOOtEvwDpjy

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-13_f58ea52060a33d50e6875834487057a2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections