General

  • Target

    2024-05-22_6ef5ecf8d8e1f0ae8243244d6f6924ef_cryptolocker

  • Size

    59KB

  • MD5

    6ef5ecf8d8e1f0ae8243244d6f6924ef

  • SHA1

    690f3c365e68b885306bf0d2f20859a8badd128a

  • SHA256

    ab73b05d5b3257f09a84b58efee757a890730e90c5d48a148a7cdaf7840e8ade

  • SHA512

    040150bc9060a43bea10cf736bcfbf4dc48f40b28cfc7483734198b89a4b51c115f212f04c9d42ab66e65b7a3236f64cbab6b0176e016f2681941602b96f2199

  • SSDEEP

    768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAPB32c:H6QFElP6n+gou9cvMOtEvwDpjCpVXY5

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-22_6ef5ecf8d8e1f0ae8243244d6f6924ef_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections