General

  • Target

    2024-05-28_d6e85c1ea8959ffd3eb438e80f2d0bc3_cryptolocker

  • Size

    60KB

  • MD5

    d6e85c1ea8959ffd3eb438e80f2d0bc3

  • SHA1

    1f94ed311465993a207b9473c27defd94926cc0a

  • SHA256

    97f7dcb95e05a574b01cd53ea6de8cae492c1050443cc7c7130cbd1211a59f44

  • SHA512

    c39d38814c44be9f86c63bf7bc392a5329de06be7b164cb1a0b14cbd38a9bc3f344afd7945888ddc418aa55827d6463d80e64c5d519e8df6300c893cb047089e

  • SSDEEP

    768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAP6pE:H6QFElP6n+gou9cvMOtEvwDpjCpVXm

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-28_d6e85c1ea8959ffd3eb438e80f2d0bc3_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections