General

  • Target

    2024-05-03_e5313bec89bc8297f7a5e863ae524fd3_cryptolocker

  • Size

    65KB

  • MD5

    e5313bec89bc8297f7a5e863ae524fd3

  • SHA1

    58c2ce080145f57ff5553138e853d6cea50e7210

  • SHA256

    e1048fa4ef54b6c861c40c57a492b375afe9910f39268826eac5e6e1f77ee166

  • SHA512

    6ec83eeb3724844c6bd2e16be23bf58de337bcff0dc2e7e95f8f2ca3c6db4ab30c63f182c6d5a675f9cdca8c7768413099fa6d3533e9a2c9d6870c8f0bab8443

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjY6UAXo:1nK6a+qdOOtEvwDpjo

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-03_e5313bec89bc8297f7a5e863ae524fd3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections