General

  • Target

    2024-03-18_30f05bcda962983978e77992e3678b8c_cryptolocker

  • Size

    58KB

  • MD5

    30f05bcda962983978e77992e3678b8c

  • SHA1

    978a71064b0989978696e85b9eedac24b387e6d2

  • SHA256

    ae90896ec56f1870da6732c468eb7c723d8913d3a3de6eb710a259670eb23ccb

  • SHA512

    a8dfca61629d04902925414ea6d078b60de49ca04cea654dde895103c77622b21ebe34249e205c32eb07f8050214998dbcec0f608c168fc13c300c57fc86e9ed

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YMLam5appB:z6QFElP6n+gKmddpMOtEvwDpj9aYaR

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-18_30f05bcda962983978e77992e3678b8c_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections