General

  • Target

    2024-04-29_db3bb68bfbe1fe3a5e52bbb409c15b3d_cryptolocker

  • Size

    80KB

  • MD5

    db3bb68bfbe1fe3a5e52bbb409c15b3d

  • SHA1

    d500daed2bc05c8a96dbef0f322193009655b5f7

  • SHA256

    68d39f00da5613687926a65e21e31ce671863fc7de7006d89b4c9bd798b077a6

  • SHA512

    2c04d7a5a7ecc0319f5743d2571959fac1ce12122134d67d3ddddfd148973eafd143518272dbb87ed79685b37145e18de314bf27547e2471d0e47cb24ffe6616

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1ky7Q5:zCsanOtEvwDpj9

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-29_db3bb68bfbe1fe3a5e52bbb409c15b3d_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections