General

  • Target

    2024-05-31_681c8813700b3cf06d076f143572b40a_cryptolocker

  • Size

    91KB

  • MD5

    681c8813700b3cf06d076f143572b40a

  • SHA1

    df56fbf785dc00c8184327075ab71ad89d069224

  • SHA256

    a0ebba2e987f776475286506ba2d92b4d5e7dd35f1b9af4b93f585776e3b0806

  • SHA512

    5fafa459c8e19162aa60dd0a1f37f5c6ea3539ddc05e53167d3582c11b8fd7b47571cb87a36cd234411b6baab26460684db59affc618dd98cccd13c15248f9a0

  • SSDEEP

    1536:n6QFElP6n+g9u9cvMOtEvwDpjYYTjipvF2bx1PQAA/o:n6a+1SEOtEvwDpjYYvQd2P/

Score
10/10
upx

Malware Config

Signatures

  • Detection of CryptoLocker Variants 1 IoCs
  • Detection of Cryptolocker Samples 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-31_681c8813700b3cf06d076f143572b40a_cryptolocker
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections