General

  • Target

    2024-04-25_8b3af8043b9f6e5c59f213b33d23956b_cryptolocker

  • Size

    57KB

  • MD5

    8b3af8043b9f6e5c59f213b33d23956b

  • SHA1

    2dc884319139e6c52abad2e205fbead3df174ffb

  • SHA256

    0b7bcb96c8178bf184d2f9cf4e38f603cef7fc95c186707889fe1f5862fb0a01

  • SHA512

    4b4f8f0e092794f1baa61d85f34e09fe9500b2a772dc7483a265a02c1f4da067484af023d796f954d6f3e08081a32325fcb3da5b8a9abce2f5708ff97e384a39

  • SSDEEP

    768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAPje:H6QFElP6n+gou9cvMOtEvwDpjCpVXv

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-25_8b3af8043b9f6e5c59f213b33d23956b_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections