General

  • Target

    2024-03-28_de300cf4781247ca704d2b5ac6f8da77_cryptolocker

  • Size

    116KB

  • MD5

    de300cf4781247ca704d2b5ac6f8da77

  • SHA1

    a393b3f61d683127127efeb6ff091ee8d5f6f049

  • SHA256

    1931405147a91a665bf7bfc03b52784f2897cb303491262a37348045cd474466

  • SHA512

    0392971315dc7ae204808d39331b1c4281abb80256300fe5ca3f277a8f55f7802ce4fccf7e65d032c7b81c5ee45faa8e66bec590f976f02771941781ab611aca

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjCGYQbN/PKwNgerar/D:T6a+rdOOtEvwDpjLz2

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-28_de300cf4781247ca704d2b5ac6f8da77_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections