General

  • Target

    2024-05-01_fe81fe3f41c60c9a57910be5f65f65c4_cryptolocker

  • Size

    82KB

  • MD5

    fe81fe3f41c60c9a57910be5f65f65c4

  • SHA1

    5be8cbf704e8cacdb360b7db2f2404e8166ed794

  • SHA256

    11f1f1caf091f828ee6f3d78ed215e45bb91f95f68779376aa6b5887028cb90e

  • SHA512

    561fe5f4bcc3261adc2eb8fa2eae5890eff7e71e9575ff637b0fd360ae3545f1a55d6020623ee9a6fd99ab55e0f5aae8fb0b123207248f27bf3fda0c3d600808

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOT7p:T6a+rdOOtEvwDpjN1

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-01_fe81fe3f41c60c9a57910be5f65f65c4_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections