General

  • Target

    2024-05-04_be391e0dc054404283e9b39970336d65_cryptolocker

  • Size

    79KB

  • MD5

    be391e0dc054404283e9b39970336d65

  • SHA1

    62c570e717bd703fa7d6595fdfb17ad0f862c823

  • SHA256

    3f6ebd56e36f860e242027772a58c84e6922b39f6aa77ab8a13a15b160b58476

  • SHA512

    ad5046228a78059d60fd2214a299b6b4945afc5a086ae1a663bad3b8cbe4ce3e9c9447b287e58ef2a4d7732458112b9b22ee315c0de9e07080d20139cf20cc56

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOA+YSafiPuqdm:T6a+rdOOtEvwDpjNcD

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-04_be391e0dc054404283e9b39970336d65_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections