General

  • Target

    2024-03-27_838a8d9dc402926a98cb20cdd4c2194e_cryptolocker

  • Size

    61KB

  • MD5

    838a8d9dc402926a98cb20cdd4c2194e

  • SHA1

    dbe79c40331b7a5de8aa0d88731f90c1b2dc6732

  • SHA256

    e60bfe1b881eb1f0b018bba1d30b7043d9f472d863d05b261ce3637e872e846e

  • SHA512

    b46345829caef43f3cf438da5adcad61b307a1ab95dfb1f8b762923c66aba677bceee9845bc1d27caa642e06f46ecd748527431dfd0ad1a179c09c46f1f3c7fc

  • SSDEEP

    768:T6LsoEEeegiZPvEhHSG+gkum/kLyMro2GtOOtEvwDpjhXMLamkc8J590:T6QFElP6n+gxmddpMOtEvwDpjwa390

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-27_838a8d9dc402926a98cb20cdd4c2194e_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections