General
-
Target
2024-05-24_8b6cc11b4add09b98e133ffb475137d4_cryptolocker
-
Size
69KB
-
MD5
8b6cc11b4add09b98e133ffb475137d4
-
SHA1
fe71db3d7f5e7fbc5260579637acf2b8810a6ecb
-
SHA256
17ede29b39bc82ba457686be649a9ee088bb29db44c820f66c40f72cfc81c05e
-
SHA512
ee3e95fab8d6975c16e1c0c6e7cf37aada8029bcd5d4a6084936ae74eaf807646f835eb95eea2629d1d0835203b46f7bad14e0a779832db771cdbe878adada87
-
SSDEEP
768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Pm:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAm
Score
10/10
Malware Config
Signatures
-
Detection of CryptoLocker Variants 2 IoCs
-
Detection of Cryptolocker Samples 2 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
Files
-
2024-05-24_8b6cc11b4add09b98e133ffb475137d4_cryptolocker
Headers
Sections
-
out.upx
Headers
Sections