General

  • Target

    2024-04-05_6ace1909b66e50b571440485fd8ded79_cryptolocker

  • Size

    117KB

  • MD5

    6ace1909b66e50b571440485fd8ded79

  • SHA1

    eaee3e4b9321b413459da0be45d787b63e744f49

  • SHA256

    cf488cd3731d05806b7334b2e6f8b57d947eab17d439be0c0be58b9e9f506a0d

  • SHA512

    2a0666edfba678010326ed32301fdd5f99d68e996d7561230dbc7ad3c128baeb942980e29f9b12291e454d0e8e985c26b65d44b7e3a61ae6d89188f6ac61bb2c

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbN/PKwNgp010:z6a+CdOOtEvwDpjczi

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-05_6ace1909b66e50b571440485fd8ded79_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections