General

  • Target

    2024-05-27_5e516cb5a47850cf9508a1d251f82d22_cryptolocker

  • Size

    59KB

  • MD5

    5e516cb5a47850cf9508a1d251f82d22

  • SHA1

    5a2c2317f38eb56080468eb81e29feba1a90834a

  • SHA256

    e9c35d01238940aa28ac7e9fe8e9f7b0f1c7ddd3544b16c86dc44d82d8aa6695

  • SHA512

    f13219586178c78a65715b44635ce78742c0dc3b61e68767b159ee81a6c6577a018830e5e3bc50f27d959e4e81696adec3eef9089da5a904b2e96ab1994a96a7

  • SSDEEP

    768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAPjL:H6QFElP6n+gou9cvMOtEvwDpjCpVX6

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-27_5e516cb5a47850cf9508a1d251f82d22_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections