General

  • Target

    2024-04-08_cf5efb53f584a7492bf33ada3ffee16f_cryptolocker

  • Size

    65KB

  • MD5

    cf5efb53f584a7492bf33ada3ffee16f

  • SHA1

    01bd366ff057d9ebdafa7ccdabcaef0723ef0656

  • SHA256

    6f3c78d9ea25dd12d7a60f33045827f5e0e6cb2bf996a6a1fbd0fe0ad52ddb68

  • SHA512

    1b6b92606842bd736f40c7eeb280a2d1678cd99b8b9a9af481f989ace2e55446a5dd594cc40c2d870981d8bffa5fea90c6640f335a95538f34b7b4c9e83f1fda

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYibAoQRv:1nK6a+qdOOtEvwDpju

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-08_cf5efb53f584a7492bf33ada3ffee16f_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections