General

  • Target

    2024-05-31_3d0af1848e4d6eea5b41c03fc8e61162_cryptolocker

  • Size

    59KB

  • MD5

    3d0af1848e4d6eea5b41c03fc8e61162

  • SHA1

    4e8e890bf46a930ffbe4d498eb3db65e4f82564f

  • SHA256

    aabe4180878eb1e059260bdba4d8c57b91e4582ab15ea356e57868efeeabe4e2

  • SHA512

    af5872ffc8d4369e1b51e587c3caa73dcc3a9e2bf7cb6a3693f8cd681332de6e8ae837db58db5c7df77be85a78b6b32d7f8259c6dfc3cd000d7ed65a14e57ce5

  • SSDEEP

    768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAP3qo:H6QFElP6n+gou9cvMOtEvwDpjCpVXho

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_3d0af1848e4d6eea5b41c03fc8e61162_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections