General
-
Target
2024-04-25_dcf2c9e4b00986e50b8e1666063604c8_cryptolocker
-
Size
67KB
-
MD5
dcf2c9e4b00986e50b8e1666063604c8
-
SHA1
3dfd3d29cb52b2249c25186cfc207b3e1b2dc574
-
SHA256
089067714ca03faff684a9ef1a418e031c86161b4f095648f845a70ce03733fe
-
SHA512
28591304028f00d11a751e2fbe85f3c3e1315341891a613c74d9b0bef905d7409494878c9764139e10813f04db519d8b47b199d512bfee68f5682f801b6b8e26
-
SSDEEP
768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Px:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAx
Score
10/10
Malware Config
Signatures
-
Detection of CryptoLocker Variants 2 IoCs
-
Detection of Cryptolocker Samples 2 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
2024-04-25_dcf2c9e4b00986e50b8e1666063604c8_cryptolocker
Headers
Sections
-
out.upx
Headers
Sections