General

  • Target

    2024-03-25_4002e1263231a0d3fd3d2a7391974a6d_cryptolocker

  • Size

    109KB

  • MD5

    4002e1263231a0d3fd3d2a7391974a6d

  • SHA1

    311075d0ed764f43049c589936c91570fb88aec2

  • SHA256

    0a5fd9cda965b7b3875047023251208907e097c0bad7918a420c8345f17e08ac

  • SHA512

    1f42d3b041dba93bf6f727dd837c625944dcc48b6ec9038a71cfac4cfff7a6ceb0ac025df4014a8c481891cd2e6c3dd98950b1bd0421cf94c66cd7ca32b4d374

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsalRn5iF1j6GkszfF7:1nK6a+qdOOtEvwDpjV

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-25_4002e1263231a0d3fd3d2a7391974a6d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections