General

  • Target

    2024-04-30_cfdb739b444b731f0e14914c2de6cc57_cryptolocker

  • Size

    55KB

  • MD5

    cfdb739b444b731f0e14914c2de6cc57

  • SHA1

    0fd4decf291cd5a8f81687817f92c37bd88c217c

  • SHA256

    e69e0daf9f2da76d1cdd6610b4bcd33256bdda5a8def98f5abd120357f2311e3

  • SHA512

    158f34cb3b967a990a14cc173c85aa8685e9b6a07c44ae8571d5c7aa052c0876f12ed484bd2d05a4c73606ac83dab00ca4a93e85980079432c3e38e236763abb

  • SSDEEP

    768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjlbU:bP9g/xtCS3Dxx0AU

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-30_cfdb739b444b731f0e14914c2de6cc57_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections