General

  • Target

    2024-04-17_6f966bf274703f988f0c1bafffefa900_cryptolocker

  • Size

    99KB

  • MD5

    6f966bf274703f988f0c1bafffefa900

  • SHA1

    61702bc1c452dbaf9c2b66f8b9375bed1fb3eb06

  • SHA256

    117e8fc9989b607d37ba572521591e7156ae76ce5ccd5ea5f579a21b1d459c56

  • SHA512

    5270841cd360374972978d965946d953eb90560bfce339e84b744ab66bf829523f7196690ca53d458577ce9785a0dac07f6658095d7f5ebb35a0ffcb8be458a4

  • SSDEEP

    1536:z6QFElP6n+gKmddpMOtEvwDpj3GYQbbr/BKiX7+:z6a+CdOOtEvwDpjcG

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-17_6f966bf274703f988f0c1bafffefa900_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections