General

  • Target

    2024-05-17_8ad08fddb128b0530e2aebaa3b06daf8_cryptolocker

  • Size

    80KB

  • MD5

    8ad08fddb128b0530e2aebaa3b06daf8

  • SHA1

    63623322a5e4549accd36f6ded7ab8de80837889

  • SHA256

    b9a66c5b3e9cb8b4a74c82905b7a7fb260f47791b75ba5a4e009bfecf0dc542a

  • SHA512

    e40f3b01664dde05ee67f65a78ee9d576532b9b69fbb0de7684ca892a2f4d157ddcde28eb61d498b56c97af9016efd7a93ad2fb5213dd475b122107f4c0a689b

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOA+YSafiPuqd6:T6a+rdOOtEvwDpjNc3

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-17_8ad08fddb128b0530e2aebaa3b06daf8_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections