General

  • Target

    2024-05-14_13b3f00849c15d79261f20807dc4c208_cryptolocker

  • Size

    90KB

  • MD5

    13b3f00849c15d79261f20807dc4c208

  • SHA1

    a54101f1ee345f1e8f80602ad0d8dece1871cefa

  • SHA256

    701a56d3b9c0e8c1596685440120f22895913ee67f599e33b415168049a593c2

  • SHA512

    d9db4fd6aaa5f782512ae3b0ded27780000b6d5e916b4ae4818ef68e6244a63c99d46554b6440c540f4e68e0af0ffca4660c8dc34adee4ad9fe4772002b622b9

  • SSDEEP

    1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAA/h:n6a+1SEOtEvwDpjYYvQd2Py

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-14_13b3f00849c15d79261f20807dc4c208_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections