General

  • Target

    2024-04-28_edd289ed8b345a415cee95e41cf74a2a_cryptolocker

  • Size

    65KB

  • MD5

    edd289ed8b345a415cee95e41cf74a2a

  • SHA1

    ae88532ed9469c6eaa087673e666a0a4b7cd8306

  • SHA256

    fe8543a054489c7d5d58f0c54020f0dfec0acccb875bf4e03beccd24787b406c

  • SHA512

    016b231352a178ca22da4cea0b930f93b7dd6a2d1b6d7629a433fefd79547f5399e34f58bbf07f4e39d3b2555cc7269cab17bd08771c8f5645590785ac1629a0

  • SSDEEP

    768:zQz7yVEhs9+syJP6ntOOtEvwDpjFelaB7yBEY9Su8F5mLZ5kJ7AK2W:zj+soPSMOtEvwDpj4kpmeLmQlAlW

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-28_edd289ed8b345a415cee95e41cf74a2a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections