General

  • Target

    2024-04-05_5bb9c870ae6812acf768d7dbc6afaed9_cryptolocker

  • Size

    61KB

  • MD5

    5bb9c870ae6812acf768d7dbc6afaed9

  • SHA1

    a7ae3ee468840bc5aeaffbea3b3a941ccc50007b

  • SHA256

    12a42936b19455148ab489a247bf7dfac5f45840023e39b72eaae0f67cfb8cda

  • SHA512

    5802c1a9d8e100d6b2f1bad4a52b6c678b39589744e67a73d847abcf97c4e310bb10fd9aad88789ce8073a0928802465f4bb1c36c0e4d513683b3909d9f39a31

  • SSDEEP

    768:T6LsoEEeegiZPvEhHSG+gkum/kLyMro2GtOOtEvwDpjhXMLamkc8J59Cb:T6QFElP6n+gxmddpMOtEvwDpjwa390

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-05_5bb9c870ae6812acf768d7dbc6afaed9_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections