General

  • Target

    2024-05-24_80da98f5b343961fb46d2e9a31dbdba3_cryptolocker

  • Size

    95KB

  • MD5

    80da98f5b343961fb46d2e9a31dbdba3

  • SHA1

    e017b14ce1f7e94e23013f1e3ffe484e9dbc3017

  • SHA256

    90e1ffc041939e5b96fa0cee86f4d1858178232ac8731726526c20b035c9269c

  • SHA512

    82ce763855efcf1117c7c9b31ea60085615c85f95501a031b026fa708a30d77a704dd217c138cce7441ca12372a7ea3c58fd71d9ab08bdb5f3f6b51d0d2b4ebc

  • SSDEEP

    1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/kw:zCsanOtEvwDpjBD

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-24_80da98f5b343961fb46d2e9a31dbdba3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections