General

  • Target

    2024-03-27_bf5f6c6cb05c92167713f6e8b901fc70_cryptolocker

  • Size

    82KB

  • MD5

    bf5f6c6cb05c92167713f6e8b901fc70

  • SHA1

    0af23f77accb4a1c3ee00521d635d3ca51f54bb6

  • SHA256

    0847221b636e3fb4fddfdae526f4a43eae45904e6189df0d1d2bfbdbc9f3925a

  • SHA512

    cc71f7b41bff648e8f73ea4c54dfb83ef02d541754f113c9e9bd65a4d4da42624858de71602da4fd3b13c93ca547c2d29ded213756a4c10365a7a24f4c9b1f0a

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBd00:T6a+rdOOtEvwDpjNtz

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_bf5f6c6cb05c92167713f6e8b901fc70_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections