General

  • Target

    2024-05-17_e40ddb0b2ccfb9c68a6ce1deb115d508_cryptolocker

  • Size

    59KB

  • MD5

    e40ddb0b2ccfb9c68a6ce1deb115d508

  • SHA1

    57c5860ffa861c5ff49565b0d5e53e1bce3d5bc2

  • SHA256

    f601ebaf9faec972ca5fdb63b92dac77732729905cc60dbfd1056dbb0bf61718

  • SHA512

    5e9c898e3498b8e7bf0109f50b459b0f9a860a330066b2ffd37b1606d07f67b557d7e126cdbdaa334b97cb02bbb88089dfa5cc86674c008f26fbd9bf05d8a94b

  • SSDEEP

    768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAPB3R:H6QFElP6n+gou9cvMOtEvwDpjCpVXYh

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-17_e40ddb0b2ccfb9c68a6ce1deb115d508_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections