General

  • Target

    2024-05-29_086eaae3a072efca24a2bf3358b04c4a_cryptolocker

  • Size

    79KB

  • MD5

    086eaae3a072efca24a2bf3358b04c4a

  • SHA1

    def71b0021208456b7c27c7e47df93a6fdd58eac

  • SHA256

    a17e4462056a8bccf1c1b9dbb16a7b6d5697b1981c9fc121d11f6deef8bbdcfd

  • SHA512

    fbf4f418ef9c63c72b496b36b908c9e518054313d7008e8bfc780fbc1a58d5a402b28107627cb5855a8577d4479ba1ba412ddf449404dbc3c754a8907fc84b5c

  • SSDEEP

    1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdJcRU:T6a+rdOOtEvwDpjNtR

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_086eaae3a072efca24a2bf3358b04c4a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections