General

  • Target

    2024-04-06_da6a28c07a28f857cdcd87f1c93131b2_cryptolocker

  • Size

    88KB

  • MD5

    da6a28c07a28f857cdcd87f1c93131b2

  • SHA1

    8529f34699286211f4c2fb1cc6f91ad3b393a444

  • SHA256

    f819a31dffbbeef1e22fa9ca3037b0fc7c8c149ea5dcbcd9241a435658ce0c3b

  • SHA512

    c625b6977e6e35988ba6eda6e00d70c67fdce5d8c9cfe6749feb8b2cad627a26475ace87351996096ce795835917c2439a9379991942f5d0cc803fe54092ae97

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDje:zCsanOtEvwDpjP

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-06_da6a28c07a28f857cdcd87f1c93131b2_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections