General

  • Target

    2024-04-30_49a7e28d585b829f9decb0e83f0e4814_cryptolocker

  • Size

    52KB

  • MD5

    49a7e28d585b829f9decb0e83f0e4814

  • SHA1

    eb7771f3bfcc23f366ee01d38b08d40c35bfe772

  • SHA256

    d7550f52f99cabfb0d91115fb1252209d63160016cdca90df1e0a8c0fdd2386f

  • SHA512

    d7a70b3810720cb0d34403f43bc03ef34fe37df064c4d630aaa2ba1483e75fef6c73e2b4e85bc8a9fec7609117872708bbb6a7007787b83fddc7096f14f44731

  • SSDEEP

    768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTO9+e:z6QFElP6n+gKmddpMOtEvwDpj31i9H

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-30_49a7e28d585b829f9decb0e83f0e4814_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections