General

  • Target

    2024-03-14_a968bdc3832a455255d7408206d9a258_cryptolocker

  • Size

    109KB

  • MD5

    a968bdc3832a455255d7408206d9a258

  • SHA1

    511c88df45002bd4b75faf1a41d39bcc16015b05

  • SHA256

    eb4a76ca7812f0ea21522020deddb860643342372d378c6cbcb78d1b4618d0d2

  • SHA512

    f100f6c243fb0b4937f0fab2327ded0fdc4e9c3e1a2f149fdf043c61472f70a17ca783b498d48ba9ed49d528cd456836a5ef6c9c96d81a25789a293b59ecef50

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6GksgEne9:1nK6a+qdOOtEvwDpjy

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-14_a968bdc3832a455255d7408206d9a258_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections