General

  • Target

    2024-05-23_a30e12965c6dbd3758b41a43287f85a5_cryptolocker

  • Size

    67KB

  • MD5

    a30e12965c6dbd3758b41a43287f85a5

  • SHA1

    ec07cadb5096f437a3e0cd9af8eba439852b1d5b

  • SHA256

    580c9819833cf0db5c2bfa04da7a38f77acb40957d9736155748bbfc13f62d29

  • SHA512

    cb6b887b01a1919d67d6790f372f897819b2736fcd30e7f4ad167b0663b93a6e6ccd54fbc7106ce90b0dc45f927d2ecab1d8441c597102af2b3f3a1451fbbcc5

  • SSDEEP

    1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYibAoQRC:1nK6a+qdOOtEvwDpjb

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-23_a30e12965c6dbd3758b41a43287f85a5_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections