General

  • Target

    2024-04-28_2de5da17aa7e849c2206eef82c19b562_cryptolocker

  • Size

    80KB

  • MD5

    2de5da17aa7e849c2206eef82c19b562

  • SHA1

    63ab5469453d27ff449281d439f5fd4b374abe86

  • SHA256

    cc155f1cc99a4b267153cbca8aab10f3c4041fcd2db812c8f5ce511929b44311

  • SHA512

    a7ef85d2bbb01da3b62c992e33b131412efa867b9fb2c6da08f9df694169638c7a41db8eb802c2dfd7d5ca753b1efdb15e134eb8b32698c0e24f2db95f2be206

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdf:T6a+rdOOtEvwDpjNtZ

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-28_2de5da17aa7e849c2206eef82c19b562_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections