General

  • Target

    2024-04-26_645c348bb130a771ffba7a933f8b4933_cryptolocker

  • Size

    89KB

  • MD5

    645c348bb130a771ffba7a933f8b4933

  • SHA1

    461a1367f32e3f9d47bd1f30a91253749cf13fc5

  • SHA256

    1dbc012bbf5995a828af4b6bb322c3e56b0518800b972e36d634d007dcc31e44

  • SHA512

    42c2d69a6f0c414ec711042700914fca615153d2f0318f1e14560a25af529c385168a9cdc735a2212d91fc95fa4fade45acea471afdc4759e938ab8b00918397

  • SSDEEP

    1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAr:n6a+1SEOtEvwDpjYYvQd2Pr

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-26_645c348bb130a771ffba7a933f8b4933_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections